Cybersecurity Alert: Rising Social Engineering Threats to IT Help Desks

Organizations are increasingly facing cybersecurity threats where attackers use social engineering tactics to bypass security controls. A current trend involves targeting IT help desks and call centers with techniques like voice-altering technology and publicly available information to impersonate employees. These attackers aim to trick support personnel into resetting passwords and redirecting multi-factor authentication (MFA) codes to unauthorized devices, gaining access to sensitive systems.

To counteract this threat, organizations should be vigilant about all requests, especially those made over the phone, and ensure secure protocols are in place to prevent unauthorized changes to passwords and MFA credentials. IT and help desk personnel are encouraged to remain cautious and to double-check the identity of any individual requesting authentication modifications, as these may be attempts to exploit internal systems.

Raising awareness among all staff, especially those handling support requests, and emphasizing thorough identity verification can significantly reduce the risk of unauthorized access. For best practices and further information on preventing social engineering and phishing attacks, refer to resources provided by the U.S. Department of Homeland Security’s Cybersecurity & Infrastructure Security Agency (CISA).