
Fake IT help desk calls led to remote access and VYPR ransomware
Cisco Talos says callers often knew only names and emails, and one Quick Assist session ended in ransomware.
5 stories, newest first · one card per story

Cisco Talos says callers often knew only names and emails, and one Quick Assist session ended in ransomware.

The firm says account login was 53% of suspected digital fraud in the first half of 2026.

Flare says a help-desk call alone does not prove the group, and CISA urges phishing-resistant MFA.

Netarx launches live-conversation detection that rates callers green, amber, or red to catch deepfake social engineering.

Help desk account recovery is increasingly the weakest link in MFA-protected identities, as Scattered Spider's impersonation-driven Marks & Spencer attack demonstrated.
Today 1.6K readers · 2.4K views · 775 reads · all time 189K views