Okta Uncovers Custom Phishing Kits Built for Vishing Callers

Research from Okta’s threat intelligence team describes a growing wave of voice-based phishing (vishing) toolkits that synchronize live phone calls with dynamic phishing pages to capture credentials and socially engineer victims into approving multi-factor authentication prompts; these kits are increasingly sold as-a-service and can defeat non-phishing-resistant MFA. Recommended defenses include enforcing phishing-resistant authentication (passkeys/Okta FastPass), network/tenant allowlisting to block anonymizing services, and live caller verification.