FBI, CISA Echo Warnings on ‘Vishing’ Threat
Summary: The FBI and CISA issued a joint alert on Thursday warning that a vishing campaign targeting companies began in mid-July 2020, with attackers impersonating IT helpdesk staff to steal VPN credentials and 2FA or OTP codes. The agencies said the actors used unattributed VoIP numbers and later spoofed company numbers, compiled dossiers from scraped public profiles, and in some cases intercepted one-time codes through SIM swapping.
What you should know: The alert describes a tight timeline between initial breach and a disruptive cashout scheme, with attackers mining victim databases for customer personal information to leverage in further attacks. The entry point was a phone call to a new hire's personal cellphone, not a flaw in the VPN itself.
Read the original at Krebs on Security ↗
- Topics
- Phishing & Social Engineering
- Related
- US disrupts North Korean campaign behind $400 million crypto theft Cyber Risks · Nov 14, 2026North Korea ‘s Crypto Theft Operations: DOJ Seizes $1.2 Billion and Disrupts Hacker Infrastructure Cyber Risks · Nov 13, 2026FBI Says North Korean Hackers Stole Over $400 Million in Crypto Using Deepfake Video Calls Cyber Risks · Nov 13, 2026