Introduction: Real-time generative AI voice cloning has evolved from academic research into commodity tooling, enabling attackers to execute live vishing scams that bypass traditional organizational skepticism. By combining instantaneous audio synthesis with deep reconnaissance of internal corporate metadata—such as active purchase orders and vendor identifiers—cybercriminals successfully mimic high-ranking executives to authorize fraudulent wire transfers. Learning Objectives & Secrets: Master the underlying mechanics of low-latency real-time neural text-to-speech (TTS) and voice conversion models used in modern social engineering.

As digital banking continues to grow in popularity, fraudsters are constantly looking for new ways to exploit customers and gain access to their accounts. One of the most prevalent threats facing consumers today is the combination of vishing attacks and banking app takeovers. Vishing, or voice phishing, occurs when fraudsters contact customers by phone while pretending to represent a trusted organisation. Theo Hidulika, FNB Namibia Fraud Analyst discusses how these scams work, why fraudsters continue to rely on them, the warning signs customers should be aware of, and the practical steps they can take to protect themselves from becoming victims of banking app takeovers and vishing attacks.

Attackers ring staff on personal mobiles posing as IT support and capture logins on fake portals. The callback rule that stops it.

UNC6671, an extortion group engaging in tailored IT helpdesk voice phishing (vishing), has rebranded and diversified its operations over the past several months, Google Threat Intelligence Group (GTIG) reports. The…

<p data-pm-slice="1 1 []">Agentes de la Polic&iacute;a Nacional han identificado a un hombre y una mujer, de 42 y 47 a&ntilde;os, respectivamente, como presuntos autores de un delito de estafa a una vecina octogenaria de Granada. Ambos cuentan con antecedentes policiales y habr&iacute;an recibido en cuentas bancarias a su nombre <strong>dos ingresos de 1.200 euros cada uno</strong>, obtenidos mediante el m&eacute;todo conocido como <em>vishing</em>.</p> <p>Esta modalidad de fraude consiste en hacerse pasar por personal de una entidad bancaria para enga&ntilde;ar a las v&iacute;ctimas y conseguir que realicen operaciones econ&oacute;micas, habitualmente mediante llamadas telef&oacute;nicas o mensajes de mensajer&iacute;a instant&aacute;nea.</p> <h2>El enga&ntilde;o comenz&oacute; con un mensaje que alertaba de un cargo de casi 15.000 euros</h2> <p>Los hechos se remontan a principios de junio, cuando la v&iacute;ctima recibi&oacute; un mensaje en el que aparec&iacute;a el nombre de su

A class action alleges Spectrum/Charter failed to secure customer data in a 2026 ShinyHunters cyberattack (42M+ records). Allegations unproven; nothing to claim.

Introduction: Voice phishing (vishing) continues to bypass traditional network defenses by exploiting non-technical humans through phone calls, social engineering, and rapid OTP theft. Open-source real-time analysis engines like PhishGuard AI bridge this gap by transcribing audio instantly and feeding the contextual stream into high-reasoning language models. By pairing low-latency automatic speech recognition with automated local browser alerts, security engineers can establish real-time defense layers against interactive telephonic threats.

Phishing remained the leading initial access technique, while percentage of ransomware and pre-ransomware cases increased. Finance and public administration tied as the top-targeted industries.

Intel 471 is a leading provider of threat intelligence and security research.

Vishing attacks impersonate IT help desks to gain remote access, bypassing MFA and enabling ransomware. SOCs must detect and respond swiftly to these evolving threats.

Cisco Talos found IT help desk vishing gave attackers remote access as ransomware rose to 27% of its Q3 2026 incident response cases.

Security researchers at Group IB have discovered new developments in the field of voice phishing (vishing). The "CallFlow" application, integrated into the Phishing-as-a-Service (PhaaS) platform "Balonx," can conduct phishing calls without human intervention using multiple AI systems. This could increase the number of attacks many times over. Currently, vishing attacks operated via CallFlow are primarily concentrated in Mexico, but global imitation seems likely. PhaaS providers like Balonx, currently active mainly in Mexico, offer their customers pre-built phishing pages and other related services. These offerings have become so professionalized that they… Read more

Sicherheitsforscher von Group IB sind auf neue Entwicklungen im Bereich des Voice-Phishings (Vishing) gestoßen. Die in die Phishing-as-a-Service-(PhaaS-) Plattform „Balonx“ integrierte Anwendung „CallFlow“ kann mithilfe von mehreren KI-Systemen Phishing-Anrufe ohne menschliche Beteiligung führen. Dies könnte die Anzahl um ein Vielfaches erhöhen. Momentan konzentrieren sich die durch CallFlow operierten Vishing-Angriffe vor allem auf Mexiko, eine weltweite Nachahmung erscheint aber wahrscheinlich. PhaaS wie der aktuell vorwiegend in Mexiko aktive Anbieter Balonx, stellen ihren Kunden vorgefertigte Phishing-Seiten und weitere entsprechende Dienstleistungen bereit. Dabei haben sich diese Angebote mittlerweile so weit professionalisiert, dass sie... Der Beitrag Mit KI voll automatisierte Vishing-Angriffe erschien zuerst auf B2B Cyber Security.

Trust Onion helps users verify callers with rotating codewords, check messages, and get help when urgent requests raise suspicion.