- Attackers now call helpdesks instead of sending phishing emails to breach networks
- Impostors pose as executives to manipulate support teams into resetting MFA settings
- Personal details scraped from LinkedIn make the deception more convincing for callers
Attackers are no longer trying to break into corporate networks through email phishing or malware, and are now targeting IT helpdesks through direct and bizarre phone calls.
