Social engineering and voice phishing

A caller posing as ReliaQuest's security team turned one push approval into a live session

ReliaQuest says an August 22 caller named a real colleague to steer staff onto a lookalike single sign-on page, and the password plus push approval that followed bought a brief session on its identity dashboard.