Vishing Kits Target MFA with Live Phone Scammers

Okta Threat Intelligence identified multiple phishing kits designed for voice-based vishing attacks. These kits, sold as-a-service, allow attackers to manipulate the authentication process while conversing with victims over the phone, targeting major companies like Google, Microsoft, and Okta. The kits are engineered to defeat multifactor authentication by synchronizing fake login pages with live phone interactions.