VISHING

Prepared by : Krypton - 36
WHAT IS VISHING ?
Vishing is one of social engineering where the scammar pretends to be a
trusted entity (e.g Microsoft/Google)

It uses voice communication, typically phone calls or voice

messages, to trick individuals into divulging personal information.

2 types :
• Government Agency - Fear
• Company - Promote
They try to get their victims to reveal confidential information before they
have time to consider what they're doing

The goal of vishing is to obtain personal data that can be used in

identity theft, monetary gain, or account takeover.
 V=VOICED TARGETS

• Relies on voiced • Mainly targets old

communication. individuals but can also
• Attackers use spoken happen to anyone.
words to manipulate • Attackers often target
and deceive the targets. (Non-IT savvy Victims)
(Social Engineering)

CALLER ID
SPOOFING
IMPERSONATION
VISHING • Attackers will trick you
• Attackers impersonate by listing themselves as
trusted entities, such as CHARACTERISTICS "Unknown" or spoofing
banks, government organization's number/
agencies and IT URGE 1st World Countries.
support.
Trust, Fear, Greed,
 HOW VISHING
ATTACKS TAKE
Vishing attackers try to establish trust with the target by using personal
PLACE
information, such as the target's name, address, or recent activities. This
information may be obtained from publicly available sources or previous
data breaches.

Government Official Company

Attackers may pose as government
officials, such as tax officers,
immigration officers, or law
enforcement agents.
Representative
The attacker may pose as an employee
of a well-known company, like a bank,
credit card company, or tech support
service.
HOW TO DEFEND AGAINST THIS
Be Skeptical
ATTACK
Be cautious when receiving unexpected calls

Regularly Update Security Software

Keep your devices and security software up to date

Verify Caller Identity

Take the time to independently verify their identity.
Example of REAL WORLD Statistics of
VISHING
 Example of REAL WORLD case of
VISHING
Coerced people Vaccination
into signing up to
FAKE Program
his fraud

Gained a
Teige Gallagher WHOPPING
(2021), UK Posed as an NHS
£34.5m
employee
THANK
YOU