Fake IT help desk calls led to remote access and VYPR ransomware
Cisco Talos says callers often knew only names and emails, and one Quick Assist session ended in ransomware.
Stories per day · 30 days
8 RSS
Relatedquick-assist3bank-fraud2help-desk2it-support-scam2microsoft-teams2netherlands2ransomware2remote-access2scattered-spider2smishing2social-engineering2adversary-in-the-middle1agent-observability1ai1akira1android1arrest1asd1
62 stories, newest first · one card per story
Stories tagged #vishing
Talos Q3 2026 IR trends: help-desk vishing and rising ransomware
Phishing led initial access in just over one-third of engagements, down from over 50 percent, while ransomware rose to 27 percent.
2
Canadian help-desk vishing campaign bypasses MFA in real time
Callers send staff to branded relay pages, then register MFA methods and steal Microsoft 365 data before extortion.
1
Australia’s ASD issued more than 4,400 cyber warnings in a year
Victim reports helped disrupt an August 2025 Akira campaign linked to a known SonicWall flaw.
1
Fake Microsoft Teams IT support used for remote access and malware
Arctic Wolf tied more than 400 cases to external chats, inbox floods, and tools such as Quick Assist, sometimes within 15 minutes.
1
Dutch police arrest two over AI bank calls and NFC card fraud
Police say a fake banking app copied NFC card data so accomplices could withdraw cash from 170 victims.
Dutch police arrest two over NFC-relay bank fraud above $400,000
Police say 170 victims lost more than €380,000 after AI voice calls led them to scan debit cards.
Phone scams shift toward texts, voice clones, and QR codes
Consumers reported $470 million lost to text scams in 2024, and CrowdStrike says vishing doubled in early 2026.
Exaforce says GitHub token theft and vishing drain data in minutes
A dormant OAuth token pulled 472 of 638 repositories; ClickFix and help-desk vishing followed the same pattern.
1
Scattered Spider uses help-desk calls to bypass MFA
Flare says a help-desk call alone does not prove the group, and CISA urges phishing-resistant MFA.
1
Google Android Flags 5 Million Suspected Scam Calls and Texts Monthly
Google says Android now flags over five million suspected scam calls and texts monthly and is adding Gemini protections.
Medicare scam calls, texts and ads: What to watch for this Open Enrollment
ESET warns Medicare Open Enrollment scammers use calls, texts, and fake ads to steal personal and financial data.
Weekly Update 525: AI Data Breach Hyperbole
Troy Hunt says recent breaches came from phone vishing, not AI, calling AI breach hype unsupported.
Luna Moth Leaks Shed Light on Ransomware Group's Inner Workings
Leaked internal files expose Luna Moth's phone-based social engineering operation, where paired callers and remote-access operators extort victims' data.
1
Silent Ransom Group Allegedly Extorted $207 Million Without Encrypting Files
Silent Ransom Group allegedly took about $207 million from 27 law firms using phone social engineering, not encryption.
7
FBI arrests another suspected ShinyHunters hacker after agency breach
FBI arrested another suspected ShinyHunters member linked to the recent breach of an FBI jobs platform.
3
Social Engineering Detection Moves Into the Live Conversation
Netarx launches live-conversation detection that rates callers green, amber, or red to catch deepfake social engineering.
2
16 Suspects Detained in Timor-Leste for Japanese Police Impersonation Scam
Timor-Leste detained 16 suspects accused of phone-scamming people in Japan by impersonating police.
3
Japanese Police Impersonation Scam Operation Dismantled as 16 Suspects Detained in Timor-Leste
Timor-Leste detained 16 suspects accused of impersonating Japanese police in cross-border phone fraud.
Detained ShinyHunters hacker reportedly helping FBI track down fellow members
Jordan detained alleged ShinyHunters member Rey, who is reportedly cooperating with the FBI against the group.
2
Ransomware Leverage is Growing by the Terabyte: Takeaways from ThreatLabz 2026 Ransomware Report
Zscaler ThreatLabz reports top ransomware groups' exfiltrated data volume jumped 276% year-over-year to 896 TB despite payments falling to $327.8M.
1
Modulate Raises $25M to Fight Deepfake Voices With Next-Generation Audio AI
Modulate raised $25 million to scale audio AI that detects deepfake voices and conversation fraud.
Researchers Discover Cybercrime Server Containing AI Tools, Phishing Kits and Stolen Data
Researchers found an exposed French cybercrime server holding GHOST C2, phishing kits, AI agents, and over 16,000 stolen credentials.
2
Fake Google Security Team ad says 'no script reading' in voice phishing - then prints the script
Trellix mocks a Telegram ad recruiting voice-phishers impersonating Google while forbidding script reading.
1