Summary

  • In a recent disclosure, Cisco revealed that a voice phishing attack resulted in the download of personal information of users of a third-party customer relationship management (CRM) tool.
  • The information included names, addresses, phone numbers, and email addresses.
  • Cisco has stated that no sensitive information was exposed, and neither were any of its products or services affected.
  • The company’s investigation found no evidence that other CRM tools were compromised, either.
  • Cisco is only the latest in a string of high-profile companies to have fallen victim to voice phishing, also known as vishing, with Microsoft, Okta, Nvidia, Globant, Twilio, and Twitter all having suffered similar attacks in recent years.
  • Vishing has become a particularly popular method for threat actors looking to breach the defences of major companies.
  • These attacks often involve significant research into legitimate authentication methods, with hackers using multiple forms of communication to achieve their aims.

By Dan Goodin

Original Article