{"id":13866,"date":"2024-06-12T12:23:12","date_gmt":"2024-06-12T06:23:12","guid":{"rendered":"https:\/\/dtasiagroup.com\/?p=13866"},"modified":"2024-06-12T12:23:12","modified_gmt":"2024-06-12T06:23:12","slug":"a-tale-of-the-three-ishings-part-3-what-is-vishing","status":"publish","type":"post","link":"https:\/\/dtasiagroup.com\/vi\/a-tale-of-the-three-ishings-part-3-what-is-vishing\/","title":{"rendered":"A Tale of the Three *ishings: Part 3 – What is Vishing?"},"content":{"rendered":"

\"\"<\/p>\n

Over the past two decades, the security industry has made significant strides in using technology to secure technological assets. However, the human factor in cybersecurity often remains overlooked. Consequently, cyber attackers have shifted their focus from targeting technology to targeting people. Among the various methods they employ, the three most common are phishing, smishing, and vishing. This blog series delves into these methods, the tactics and techniques used by cyber attackers, and how you can protect yourself.<\/p>\n

 <\/p>\n

What is Vishing?<\/strong><\/p>\n

Vishing, short for voice phishing, involves cyber criminals making phone calls to deceive individuals. Unlike phishing, which uses emails, vishing relies on phone calls or voicemail messages to trick people into revealing sensitive information, such as passwords or credit card details.<\/p>\n

The rise in random voicemails and phone calls asking for passwords or payments is due to the difficulty organizations face in securing personal mobile devices. Security teams often lack the visibility and control over personal phones that they have over workstations, making mobile devices a vulnerable target.<\/p>\n

Vishing attacks are challenging to identify and filter. As a result, when a cyber attacker calls a potential victim, the call is more likely to reach its target. Over the phone, attackers can create a sense of urgency and trust that is harder to achieve through email or text, making these attacks more effective and profitable.<\/p>\n

 <\/p>\n

Common Vishing Attacks<\/strong><\/p>\n

Vishing attacks come in various forms, but here are the most prevalent types:<\/p>\n

1. Tech Support Calls<\/strong> Cyber attackers impersonate IT support, calling individuals and requesting their passwords to “reset” accounts. These attackers sound convincing and aim to manipulate victims into divulging sensitive information.<\/p>\n

2. Government Agency Calls<\/strong> Attackers pose as government officials, claiming that the victim owes taxes and must pay immediately to avoid jail time. Their goal is to obtain credit card details and money.<\/p>\n

3. Tech Support Callbacks<\/strong> Instead of making the initial call, attackers trick victims into calling them. This approach bypasses phone call filters and builds inherent trust, increasing the likelihood of success. They may send texts or emails prompting the victim to call a provided number, leading to the theft of information like PayPal passwords.<\/p>\n

\"\"<\/p>\n

4. Automated Calls<\/strong> Automated calls, or robocalls, deliver messages about expired warranties, approved refunds, undelivered packages, or suspicious charges. These broad attacks target millions, akin to generic phishing emails.<\/p>\n

\"MGT_-_Blog_Graphics_-_A_Tale_of_the_Three_ishings_Part_03_\u2013_What_is_Vishing2(1).png\"<\/p>\n

<\/div>\n

 <\/p>\n

Protecting Against Vishing Attacks<\/strong><\/p>\n

Despite the focus on phishing in many security training programs, voice-based vishing attacks require equal attention. Employees well-versed in email-based threats might overlook voice-based ones. Rather than detailing every vishing tactic, training should emphasize recognizing common indicators of vishing attacks, applicable to both vishing and other phishing methods.<\/p>\n

 <\/p>\n

Key Indicators of Vishing Attacks:<\/strong><\/p>\n