[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f-vdlNX1HHb6Pa2Qzx7B8N-wcAQ-zsai6aQ9sxYzkslA":3},{"article":4,"iocs":36,"watch_terms":37,"solutions":38,"lesson":123},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":20,"category":21,"article_tags":25},"b9ebfcf0-5cfb-435f-84e7-272ded3049d6","Trust Is Not What It Seems — And Fraudsters Are Counting on It","trust-is-not-what-it-seems-and-fraudsters-are-counting-on-it-ba4956","Threat actors don't need to rely on malware to breach organizations anymore. They're simply calling help desks and politely asking for access, with a little help from artificial intelligence.","Threat actors are increasingly bypassing traditional malware defenses by using AI-powered voice phishing attacks. These sophisticated social engineering tactics involve impersonating legitimate users or employees to trick help desk personnel into granting access to sensitive systems. The rise of AI makes these attacks more convincing and harder to detect.","AI-powered voice phishing allows fraudsters to trick help desks into granting access.","https:\u002F\u002Fwww.darkreading.com\u002Fcyber-risk\u002Ftrust-is-not-what-it-seems-and-fraudsters-are-counting-on-it","https:\u002F\u002Feu-images.contentstack.com\u002Fv3\u002Fassets\u002Fblt6d90778a997de1cd\u002Fblt34579512de050396\u002F6a5a6336b09056633bee9fe7\u002Ftrust_dial-NicoElNino-getty-2079838824.jpg?width=720&quality=80&disable=upscale","2026-10-23T20:57:56+00:00","2026-10-23T22:00:20.740299+00:00",7,[17],{"name":18,"type":19},"artificial intelligence","technology","2c8f44d4-b56e-47cf-9677-04f22c9ee78d",{"id":20,"icon":22,"name":23,"slug":24},null,"Identity & Access","identity-access",[26,31],{"category":27},{"id":28,"icon":22,"name":29,"slug":30},"839da5c1-3c34-47e2-9499-f7201640e3ac","AI Security","ai-security",{"category":32},{"id":33,"icon":22,"name":34,"slug":35},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[],[],{"controls":39,"vendors":122},[40,69,98],{"slug":41,"name":42,"problem":43,"products":44},"phishing-resistant-mfa","Phishing-resistant MFA","A stolen password, or a user who taps Approve on a push prompt, is no longer enough to log in.",[45,53,61],{"vendor_slug":46,"vendor_name":47,"vendor_logo":48,"product_slug":49,"product_name":50,"url":51,"description":52},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","entra-id","Microsoft Entra ID","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fidentity-access\u002Fmicrosoft-entra-id","Cloud identity and access management with single sign-on, conditional access, passkeys and identity governance.",{"vendor_slug":54,"vendor_name":55,"vendor_logo":56,"product_slug":57,"product_name":58,"url":59,"description":60},"cisco","Cisco","\u002Fvendor-logos\u002Fcisco.png","duo","Cisco Duo","https:\u002F\u002Fduo.com\u002F","MFA and device trust, with support for passkeys and security keys.",{"vendor_slug":62,"vendor_name":63,"vendor_logo":64,"product_slug":65,"product_name":66,"url":67,"description":68},"yubico","Yubico","\u002Fvendor-logos\u002Fyubico.png","yubikey","YubiKey","https:\u002F\u002Fwww.yubico.com\u002Fproducts\u002F","Hardware security keys for FIDO2, passkeys and smart card login, in USB and NFC versions.",{"slug":70,"name":71,"problem":72,"products":73},"identity-threat-detection","Identity threat detection and response (ITDR)","Attackers who log in with real, stolen credentials get noticed.",[74,82,90],{"vendor_slug":75,"vendor_name":76,"vendor_logo":77,"product_slug":78,"product_name":79,"url":80,"description":81},"huntress","Huntress","\u002Fvendor-logos\u002Fhuntress.png","managed-itdr","Huntress Managed ITDR","https:\u002F\u002Fwww.huntress.com\u002Fplatform\u002Fmanaged-itdr","Managed detection of suspicious activity in Microsoft 365 and Entra ID.",{"vendor_slug":83,"vendor_name":84,"vendor_logo":85,"product_slug":86,"product_name":87,"url":88,"description":89},"okta","Okta","\u002Fvendor-logos\u002Fokta.png","identity-threat-protection","Okta Identity Threat Protection","https:\u002F\u002Fwww.okta.com\u002Fproducts\u002Fidentity-threat-protection\u002F","Continuous risk assessment of sessions after login, with automatic actions such as ending sessions.",{"vendor_slug":91,"vendor_name":92,"vendor_logo":93,"product_slug":94,"product_name":95,"url":96,"description":97},"acalvio","Acalvio","\u002Fvendor-logos\u002Facalvio.png","shadowplex-identity-protection","ShadowPlex Identity Protection","https:\u002F\u002Fwww.acalvio.com\u002Fproducts\u002Fidentity-protection\u002F","Decoy accounts and credentials that expose identity attacks and credential misuse early.",{"slug":99,"name":100,"problem":101,"products":102},"security-awareness-training","Security awareness training and phishing simulation","People recognise and report attacks instead of falling for them.",[103,108,115],{"vendor_slug":75,"vendor_name":76,"vendor_logo":77,"product_slug":104,"product_name":105,"url":106,"description":107},"managed-sat","Huntress Managed Security Awareness Training","https:\u002F\u002Fwww.huntress.com\u002Fplatform\u002Fsecurity-awareness-training","Security awareness training and phishing simulation, managed for you.",{"vendor_slug":109,"vendor_name":110,"vendor_logo":111,"product_slug":109,"product_name":112,"url":113,"description":114},"sosafe","SoSafe","\u002Fvendor-logos\u002Fsosafe.png","SoSafe Awareness Platform","https:\u002F\u002Fsosafe-awareness.com\u002F","Behaviour-based awareness training and phishing simulation in many languages.",{"vendor_slug":116,"vendor_name":117,"vendor_logo":118,"product_slug":99,"product_name":119,"url":120,"description":121},"knowbe4","KnowBe4","\u002Fvendor-logos\u002Fknowbe4.png","KnowBe4 Security Awareness Training","https:\u002F\u002Fwww.knowbe4.com\u002Fproducts\u002Fsecurity-awareness-training","Training library and simulated phishing with reporting.",[],{"slug":124,"title":125,"body":126,"framework_refs":127,"framework_notes":135},"ai-powered-vishing-attacks-exploit-human-trust-at-the-help-desk","AI-Powered Vishing Attacks Exploit Human Trust at the Help Desk","Threat actors are bypassing technical defenses entirely by using AI-generated voices to impersonate legitimate employees and deceive help desk staff into granting unauthorized access. The root cause is a failure in security awareness and identity verification procedures, not a software vulnerability. This matters because no firewall or antivirus can stop an attack that weaponizes human trust and social norms. As AI lowers the cost and raises the realism of impersonation attacks, organizations that rely solely on caller familiarity or verbal confirmation are dangerously exposed.",[128,129,130,131,132,133,134],"CIS Control 14: Security Awareness and Skills Training","NIST CSF 2.0 PR.AA: Identity Management, Authentication, and Access Control","MITRE ATT&CK T1566: Phishing","CIS Control 17: Incident Response Management","NIST SP 800-53 SI-2: Flaw Remediation","ISO\u002FIEC 27001:2022 Clause 7.2: Competence","NIS2 Article 21(2)(b)",{"NIS2 Article 21(2)(b)":136,"MITRE ATT&CK T1566: Phishing":137,"NIST SP 800-53 SI-2: Flaw Remediation":138,"ISO\u002FIEC 27001:2022 Clause 7.2: Competence":139,"CIS Control 17: Incident Response Management":140,"CIS Control 14: Security Awareness and Skills Training":141,"NIST CSF 2.0 PR.AA: Identity Management, Authentication, and Access Control":142},"NIS2 explicitly requires incident handling and human risk management measures; the absence of enforced identity verification procedures for privileged access changes represents a direct gap against this requirement.","AI-powered voice phishing (vishing) is a direct sub-technique of phishing; mapping help desk procedures against this technique would have prompted controls specifically designed to counter impersonation-based access requests.","While not a software flaw, the procedural gap in identity verification represents a process weakness; SI-2's principle of systematically identifying and remediating flaws applies equally to security procedure deficiencies.","This clause requires organizations to ensure personnel are competent to handle security-relevant tasks; help desk staff were not adequately trained or evaluated for their ability to detect sophisticated social engineering attempts.","Without a practiced social engineering incident response playbook, help desk staff had no defined escalation path when faced with a convincing but suspicious caller, allowing the attack to succeed unchallenged.","Help desk staff lacked specific training to recognize AI-powered vishing tactics; a structured awareness program targeting social engineering scenarios would have equipped them to challenge and verify suspicious callers.","The attack succeeded because identity verification at the help desk was insufficient; this control requires robust authentication procedures before granting access to sensitive systems."]