Fake Google Security Team ad says 'no script reading' in voice phishing - then prints the script
Trellix mocks a Telegram ad recruiting voice-phishers impersonating Google while forbidding script reading.
Trellix's Dark Web Roast described an August Telegram post by a user called Derian in a UK fraud channel that hired callers to pose as Google's Account Security Team. The ad forbade reading from scripts, then printed the exact call script, including a claim that the line was recorded. The article notes FBI IC3 reported $20.87 billion in 2025 internet-scam losses and that ReliaQuest saw English-language social-engineering job ads more than double from 2024 to 2025. Google said voice phishing became the second-most common initial-access method and the leading tactic against cloud environments.
- UK Telegram ad hired callers to impersonate Google Account Security.
- Post banned script reading, then printed the exact vishing script.
- Google ranked voice phishing second for initial access, first in cloud.
- FBI IC3 reported $20.87 billion in internet-scam losses for 2025.
- Vendors
- Organizations
- TrellixGoogleFBIReliaQuest
- Countries
- United StatesUnited KingdomCanada
From the original article
2 min read at theregister.comYes, criminals have job listings too. A Telegram user recruiting callers to work in an apparent Google Security Team voice-phishing scam told applicants that they weren’t allowed to read from scripts – in the same ad that also included the exact script they had to read during these scam calls.
By Jessica Lyons · theregister.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.