Report: Vishing and Device Code Phishing Are Surging
ID: 51d1c4cf-65c1-546c-a7a1-636a6af98c07
STIX ID: report--51d1c4cf-65c1-546c-a7a1-636a6af98c07
Feed Name: KnowBe4 Blog
Threat Score
CrowdStrike reports a notable uptick in identity-focused social engineering: voice phishing (vishing) attacks doubled in early 2026 versus late 2025 and device-code phishing rose ~15x, with APTs like CORDIAL SPIDER and SNARKY SPIDER using vishing to take over SSO accounts and quickly exfiltrate SaaS data; device-code phishing abuses the OAuth device flow to obtain tokens and effectively bypass MFA.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.