Canadian Cyber Agency Issues Warning About Voice Phishing Campaign

The Canadian Centre for Cyber Security has alerted organizations to a voice phishing campaign where fraudsters impersonate internal IT help desk staff. This tactic involves directing victims to fraudulent sign-in pages designed to capture their authentication credentials. The campaign has been reported to specifically impact individuals at legal and financial firms across the country, utilizing live credential relays to bypass conventional multi-factor authentication measures. Stakeholders are urged to maintain vigilance and enhance training for employees on identifying such scams to mitigate potential risks associated with compromised security. As technology continues to evolve, cyber threats increasingly exploit human factors, reinforcing the need for proactive security measures within organizations.