Vishing
Voice phishing, a social engineering attack conducted over the phone where an attacker impersonates a trusted organization to extract sensitive information.
Vishing (voice phishing) is a social engineering attack conducted over phone calls. Attackers impersonate banks, government agencies, tech support, or company executives to trick victims into revealing passwords, financial information, or authorizing transactions.
With AI-generated voice cloning, vishing has become more sophisticated. Attackers can now clone a person’s voice from just a few seconds of audio, making impersonation calls nearly indistinguishable from the real person.
Defenses include establishing verification procedures (call back on known numbers), never providing credentials over the phone, using a verbal passphrase for sensitive requests, and training employees to recognize vishing tactics. A security-conscious culture where employees feel comfortable questioning unusual phone requests is the strongest defense.
Related reading
Stop sharing passwords in spreadsheets
TeamPassword stores, shares and rotates your team credentials, encrypted end to end.
Trusted by 900+ agencies and small teams worldwide