#vishing
5 articles
Six articles published between April 16 and August 31, 2026, cover the vishing tag, with all six incidents rated high severity. BlackFile, Cordial Spider, and Spring Ring were observed as distinct threat actors in these campaigns. Affected sectors include financial services, enterprise, healthcare, hospitality, and retail, with incidents reported across North America and Europe. The coverage details voice-based phishing tactics targeting these industries and regions, reflecting a concentrated period of activity. No specific CVEs are listed in the fact sheet, and the reporting focuses on the operational methods and sector impacts of the named actors.
HIGHSpring Ring Vishing Campaign Targets Microsoft Teams Users
Spring Ring vishing hit 150+ employees across 10 firms via Microsoft Teams, pushing RMM tools and NTLM relay attacks against domain controllers.
HIGHCordial Spider, Snarky Spider Use Vishing, SSO Abuse for SaaS
Two cybercrime groups — Cordial Spider and Snarky Spider — are conducting rapid SaaS extortion attacks using vishing and SSO abuse to steal data within hours, researchers warn.
HIGHDeepfake Voice Attacks Outpace Defenses, Bypass MFA
Adaptive Security finds 3 seconds of audio enough to clone a voice for fraud; deepfake calls tricked employees into wiring $243K in one case. No detection tool caught the attack.
HIGHBlackFile Extortion Group Targets Retail, Hospitality via Vishing
BlackFile extortion group has hit at least 12 retail and hospitality organizations since Feb 2026, using vishing to steal VPN credentials and exfiltrate data before demanding…
HIGHATHR Vishing Platform Automates Voice Phishing with AI Agents
The ATHR cybercrime platform automates voice phishing (vishing) attacks using AI-generated voice agents to impersonate trusted entities and harvest credentials, lowering the barrier for large-scale social engineering campaigns.
Stay Updated
Get the latest cybersecurity news delivered to your inbox.