HC3 warns of social engineering attacks targeting IT help desks

The U.S. Health and Human Services, in coordination with its Health Sector Cybersecurity Coordination Center, published a sector alert to advise on mitigations to defend against spearphishing voice scams that ultimately seek to steal electronic funds transfers.

WHY IT MATTERS

User awareness training and increased security policies and procedures to improve identity verification with help desk requests can help defend against tactics that manipulate IT staff into providing access to systems through a phone call or other forms of voice …

alert attacks awareness awareness training center coordination cybersecurity electronic engineering funds hc3 health health sector help desks human mitigations policies policies and procedures procedures scams sector security security policies services social social engineering social engineering attacks spearphishing steal targeting training ultimately voice