Security News > 2022 > May > Voice phishing attacks reach all-time high

Cases of voice phishing or vishing have been reported to have risen a whopping 550% over the past 12 months alone, according to the Quarterly Threat Trends & Intelligence Report co-authored by Agari and PhishLabs.
"We are seeing an increase in threat actors moving away from standard voice phishing campaigns to initiating multi-stage malicious email attacks. In these campaigns, actors use a callback number within the body of the email as a lure, then rely on social engineering and impersonation to trick the victim into calling and interacting with a fake representative."
Per the report, the explosion in the rate of vishing attacks has overtaken business email compromise as the second most reported response-based email threat since the third quarter of 2021.
Eighty percent of the credential theft attempts were delivered via a phishing link, while 20% came to inboxes via an email attachment.
Vishing fell under the umbrella of response-based attacks, second only to 419 types of attacks.
These 419 attacks made up a majority of those logged as response-based schemes at 54.1% of malicious emails received, and BEC coming in third behind vishing attempts at 12.8% of emails received.
News URL
https://www.techrepublic.com/article/voice-phishing-attacks-reach-all-time-high/
Related news
- Ransomware gangs pose as IT support in Microsoft Teams phishing attacks (source)
- Microsoft Teams phishing attack alerts coming to everyone next month (source)
- How to Prevent Phishing Attacks with Multi-Factor Authentication (source)
- Microsoft: Hackers steal emails in device code phishing attacks (source)
- Darktrace: 96% of Phishing Attacks in 2024 Exploited Trusted Domains Including SharePoint & Zoom Docs (source)
- Phishing attack hides JavaScript using invisible Unicode trick (source)
- FatalRAT Phishing Attacks Target APAC Industries Using Chinese Cloud Services (source)