How New Phishing Kits Are Turning Vishing into Real-Time Orchestration

Okta Threat Intelligence describes a new class of real-time vishing phishing kits that let attackers “drive” a victim’s browser during a live phone call, synchronizing verbal instructions with on-screen manipulation to capture credentials and bypass MFA (including number-matching and push challenges). These kits are increasingly offered as a service and tailored to specific platforms, signaling growing sophistication and scale in voice-based social engineering campaigns.