When IT Support Becomes The Attach

Voice phishing (vishing) is changing how attackers target organisations. Instead of relying only on malicious emails or links, attackers can impersonate IT support over the phone, create a sense of urgency, and persuade employees to share information or approve changes to their accounts. This infographic breaks down how a convincing IT support call can become a route to unauthorised access, from impersonation and urgency to credential or MFA requests. It also highlights practical measures organisations can use to strengthen identity verification, monitor account activity, investigate unexpected changes, and improve employee awareness.