Waverly Secure – August 2025

Vishing, short for voice phishing

A type of cyberattack where criminals use phone calls to deceive individuals into giving away sensitive information or access to systems. Unlike traditional phishing that targets email or text messages, vishing relies on the personal and immediate nature of voice communication. Attackers often impersonate trusted figures such as IT personnel, managers, or vendors, creating a sense of urgency or authority to pressure victims into compliance. Because these calls can sound very convincing, technology alone cannot fully prevent vishing attacks—human awareness and caution are essential.

How to Protect Against Vishing

• Always verify the identity of anyone requesting confidential information by using a separate method of communication (e.g., calling back on a known company number).
• Be cautious of unsolicited requests, especially those with urgent demands for:
  • Passwords
  • Security badges
  • System access
• Follow your company’s security protocols at all times.
• Never share credentials or grant access without proper authorization.
• Use multi-factor authentication to add an extra layer of security beyond just a password.
• Promptly report suspicious calls or requests to your IT or security team to help prevent potential breaches.

Vishing attacks prey on the natural human tendency to trust others, particularly when a caller seems authoritative or creates a sense of urgency. This makes vigilance the best defense. By staying informed about the risks and following best practices, every member of an organization can help protect sensitive information and reduce the likelihood of falling victim to these deceptive schemes.

Please feel free to reach out to your trusted Waverly advisor, should you have any questions.