Voice Phishing Kits Give Threat Actors Real-Time Control Over Attacks

Okta researchers describe emerging hybrid vishing phishing kits that enable attackers to control victims’ browser-based authentication flows in real time, synchronizing spoofed support calls with dynamic phishing pages to harvest credentials (forwarded via Telegram) and defeat non–phishing-resistant MFA using OTP prompts or push approvals.