Crims hit the easy button for Scattered-Spider style helpdesk scams

Okta Threat Intelligence warns that commercially sold voice-phishing kits on dark web forums provide real-time monitoring and caller-assisted workflows to harvest credentials and defeat MFA (including push and number-matching), enabling attackers to convincingly impersonate helpdesk staff and take over Google, Microsoft, Okta, and other enterprise accounts; these kits have been linked to Scattered Spider–style IT support call campaigns used for large-scale data theft and extortion.