Loading
Get Access
Subscribe
Mandiant observed multiple attack campaigns throughout the previous year that utilized voice-based phishing as the initial access vector. Threat actors are increasingly leveraging voice communication to manipulate employees into divulging credentials or facilitating unauthorized access. This tactic represents a strategic pivot away from traditional email-based phishing, which is often mitigated by modern security gateways.
Vishing attacks are highly effective because they exploit human psychology and trust, often circumventing technical security layers that focus primarily on digital traffic. As organizations harden their email environments, attackers are shifting to voice channels to achieve similar outcomes with potentially higher success rates. This trend necessitates a broader approach to security awareness training that includes voice-based social engineering scenarios.
Advisory purposes only · QPulse Security Intelligence Platform · 2026 · Brief #00391
