Kaspersky has strengthened its Automated Security Awareness Platform (ASAP) by introducing a specialised module dedicated to vishing, or voice phishing. This addition reinforces the company’s commitment to equipping employees across industries with practical cyber-hygiene skills. By targeting one of the most manipulative forms of social engineering, the update aims to prepare users to detect and respond effectively to voice-based scams. Recent industry incidents underscore the urgency of this training, AIB reported a staggering 79% year-on-year rise in vishing cases in early 2025, including a near-loss of €41,000 by a corporate customer. Similarly, Google disclosed a campaign, identified as UNC6040, where attackers exploited voice phishing to deceive Salesforce users across approximately 20 organisations, gaining illicit access to sensitive corporate data.
Understanding the Tactics Behind Vishing Attacks
Vishing operates by persuading individuals to share confidential information, such as banking credentials, over the phone. These attacks often begin with an unusual email that prompts the recipient to call a number rather than click a link, differentiating it from conventional phishing. Kaspersky’s analysts highlight that this approach works because victims interacting with a phishing website have a moment to evaluate its authenticity. In contrast, a live phone conversation demands immediate attention, leaving little time for critical thinking. Attackers exploit this environment by applying psychological pressure, rushing the conversation, instilling fear, and creating a false sense of urgency, all aimed at disorienting the victim and extracting sensitive details that can facilitate financial theft.
Training Designed for Real-World Threats
The newly launched vishing module in Kaspersky ASAP blends interactive lessons, case studies, and practical simulations to teach users how to recognise warning signs and respond with caution during suspicious calls. This experiential approach ensures that the training extends beyond theory, enabling participants to develop instinctive, safer communication habits. To support its increasingly global audience, Kaspersky has also expanded language support within ASAP, now offering its user interfaces and training materials in over 30 languages. This enhancement ensures that teams worldwide can access the tools they need to strengthen their defences against one of the fastest-growing forms of cybercrime.
“As social engineering evolves, so must the way we educate people about it. Vishing is no longer just a threat to individuals – it’s increasingly being used to target organizations, leading to financial losses, data leaks, and reputational damage. Our new vishing module equips users with the knowledge to defend themselves against voice-based deception – a threat that is becoming increasingly sophisticated and personal. We help companies prepare their employees to recognize and resist this type of attack. Since vishing is often a gateway to more serious breaches, it’s vital to build awareness across a wide range of related topics,” said Tatyana Shumaylova, Senior Product Marketing Manager at Kaspersky Security Awareness.
Comments