Summary

The cybercrime group Scattered LAPSUS$ Hunters (SLH) is recruiting women for vishing attacks targeting IT help desks. They are offering $500 to $1,000 per call as an incentive.

Key Points

• Scattered LAPSUS$ Hunters (SLH) is a known cybercrime group.
• They are focusing on social engineering attacks, specifically voice phishing (vishing).
• The targets of these attacks are IT help desks.
• SLH is offering financial incentives ranging from $500 to $1,000 per call.
• The information was disclosed by Dataminr in a threat brief.

Analysis

This development highlights the evolving tactics of cybercriminals who are increasingly leveraging social engineering to bypass technical defenses. By recruiting women for vishing attacks, SLH is exploiting gender stereotypes to increase the likelihood of success in their campaigns. This tactic underscores the need for IT help desks to be vigilant and well-trained in identifying and responding to social engineering threats.

Conclusion

IT professionals should enhance training programs for help desk staff to recognize and mitigate vishing attempts. Implementing robust verification processes and fostering a culture of security awareness are crucial steps in defending against these types of social engineering attacks.