Voice-Phishing Kits Fueling IT Helpdesk Scams
Article Content
Browse articles 
Criminals are increasingly utilizing custom voice-phishing kits available on dark web forums to conduct social engineering scams and identity fraud. These kits target accounts from major platforms like Google, Microsoft, and Okta, providing real-time assistance to help attackers intercept user credentials and multi-factor authentication codes, as reported by Okta Threat Intelligence.
Ask AI about this cluster
Answers cite the sources they use
Updated 183d ago How this analysis works
More articles in this cluster (2)
Following this threat?
Track Scattered Spider and Google in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Social Engineering Campaign Hijacks Microsoft 365 Accounts via Passkey Alerts A social engineering campaign impersonating IT support staff is actively hijacking Microsoft 365 accounts. The attackers use passkey-themed lures to trick users into providing credentials, leading to unauthorized access and data exfiltration. Microsoft Security Research has tracked these intrusions since May 2026… 
Knight Office Phishing Kit Targets Microsoft 365 Accounts via Session Hijacking A new phishing kit named 'Knight Office' has been identified, targeting Microsoft 365 accounts by stealing active login sessions instead of passwords. Discovered by Huntress during an investigation of suspicious sign-in activity in August 2026, the kit uses a sophisticated dashboard to manage victims and harvested…