Okta Flags Customized, Reactive Vishing Attacks Which Bypass MFA

Okta Threat Intelligence warns that cybercriminals are combining vishing calls with real-time adaptable phishing kits to socially engineer victims and bypass non-phishing-resistant MFA, enabling account takeover of corporate Google, Microsoft, Okta and cryptocurrency logins. Attackers perform reconnaissance, spoof IT support numbers, direct victims to synchronized fake sign-in pages, capture credentials (sent to Telegram), and coach victims through MFA prompts to gain access.