Crims hit the easy button for Scattered-Spider style helpdesk scams
Criminals are increasingly using custom voice-phishing kits sold on dark web forums to execute social engineering scams targeting Google, Microsoft, and Okta accounts. These kits allow attackers to monitor phishing pages in real-time, enhancing their ability to deceive victims into sharing credentials and multi-factor authentication codes. The scams often involve impersonating IT support staff to gain trust. This method has evolved significantly, with attackers using detailed reconnaissance to create convincing phishing scenarios, leading to data theft and extortion from numerous organizations.
The Register·
