Security News > 2021 > January > FBI warns of voice phishing attacks targeting employees at large companies
The FBI is cautioning companies to beware of a slew of voice phishing attacks aimed at capturing the login credentials of employees.
In an advisory released last Thursday, the FBI revealed that as of December 2019, cybercriminals have been working together on social engineering campaigns targeting employees at large firms both in the US and abroad. The criminals are taking advantage of VoIP platforms to launch voice phishing, or vishing, attacks.
Last August, the FBI and the Cybersecurity and Infrastructure Security Agency warned about a vishing scheme in which criminals posing as other people called employees working from home to try to obtain their account credentials.
"Whether it's an expertly-crafted email or a convincing voice message, it's essential that employees approach any incoming request for information with a critical eye in order to confirm it's coming from a trusted source. If there is any question as to the validity, employees should immediately flag it to their security team."
"The first line of defense against phishing attacks is your employees," Schless said.
"Nowadays, it's incredibly important to train employees on how to spot these phishing attempts, especially as they do more work on mobile devices. In addition to training employees, securing any device that has access to your network is paramount to preventing issues like this. Without protecting those devices with modern endpoint protection, there will be a significant gap in your overall security posture."
News URL
Related news
- How Phishing Attacks Adapt Quickly to Capitalize on Current Events (source)
- Google raps Iran's APT42 for raining down spear-phishing attacks (source)
- Xeon Sender Tool Exploits Cloud APIs for Large-Scale SMS Phishing Attacks (source)
- Cybercriminals exploit file sharing services to advance phishing attacks (source)
- CERT-UA Warns of New Vermin-Linked Phishing Attacks with PoW Bait (source)
- How AitM Phishing Attacks Bypass MFA and EDR—and How to Fight Back (source)
- Novel attack on Windows spotted in phishing campaign run from and targeting China (source)
- FBI warns crypto firms of aggressive social engineering attacks (source)
- North Korean scammers plan wave of stealth attacks on crypto companies, FBI warns (source)
- Cybercriminals Exploit HTTP Headers for Credential Theft via Large-Scale Phishing Attacks (source)