securitymagazine.com Surge in Vishing Attacks: 442% Increase Reported
Article Content
- •Vishing attacks increased by 442% in H2 2024, with a doubling in H1 2026 compared to H2 2025.
- •Major UK retailers faced significant financial losses due to vishing, with M&S losing £300 million.
- •Deepfake audio technology is increasingly used by attackers to impersonate legitimate sources.
Vishing attacks have surged significantly, with CrowdStrike reporting a 442% increase in the second half of 2024. This rise in voice phishing exploits social engineering tactics, pressuring victims into revealing sensitive information. The first half of 2026 saw vishing attacks double compared to the latter half of 2025, indicating a growing trend. Major UK retailers like Marks & Spencer and Co-op suffered substantial losses from vishing attacks, with costs estimated at £300 million and £207 million, respectively. Attackers often impersonate IT help desks, leveraging deepfake audio technology to enhance their deception. Security experts emphasize the importance of employee training to recognize and respond to such threats effectively. Organizations are encouraged to establish clear protocols for information sharing to mitigate risks.
Ask AI about this cluster
Answers cite the sources they use
More articles in this cluster (2)
Following this threat?
Track Co-op in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Common questions
What are the main tactics used in vishing?
How can organizations prepare against vishing?
What impact have vishing attacks had on businesses?
Continue Reading
CISA Mandates Urgent Patching of Five Critical Flaws Exploited by Flax Typhoon The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has ordered federal agencies to patch five critical vulnerabilities by October 11, 2026, following exploitation by the China-linked hacking group Flax Typhoon. The vulnerabilities, added to CISA's Known Exploited Vulnerabilities (KEV) catalog, include…
Silent Lynx Targets CIS Governments via WinRAR Exploit The threat actor Silent Lynx has launched a series of attacks against government organizations in the Commonwealth of Independent States (CIS) from June 2025 to August 2026. These attacks exploit a vulnerability in WinRAR (CVE-2025-8088) to deploy reverse shells, including FoalShell and PickleShell, facilitating…