Voice phishers strike again, this time hitting Cisco
1 min read
Summary
In a recent disclosure, Cisco revealed that a voice phishing attack resulted in the download of personal information of users of a third-party customer relationship management (CRM) tool.
The information included names, addresses, phone numbers, and email addresses.
Cisco has stated that no sensitive information was exposed, and neither were any of its products or services affected.
The company’s investigation found no evidence that other CRM tools were compromised, either.
Cisco is only the latest in a string of high-profile companies to have fallen victim to voice phishing, also known as vishing, with Microsoft, Okta, Nvidia, Globant, Twilio, and Twitter all having suffered similar attacks in recent years.
Vishing has become a particularly popular method for threat actors looking to breach the defences of major companies.
These attacks often involve significant research into legitimate authentication methods, with hackers using multiple forms of communication to achieve their aims.