Protect Yourself: Vishing Attacks Are Growing More Sophisticated

Mandiant reports that voice phishing (vishing) is increasingly used as an initial access vector for ransomware operations, with attackers performing reconnaissance to craft convincing service-desk pretexts, bypass knowledge-based checks, and pressure staff into MFA/password resets; to mitigate, the report urges vishing-inclusive training simulations, strict call-back verification via official directories, recognition of urgent pretexts and unexpected MFA prompts, and better service-desk logging to detect abnormal request patterns.