Crims hit the easy button for Scattered-Spider style helpdesk scams

Criminals can more easily pull off social engineering scams and other forms of identity fraud thanks to custom voice-phishing kits being sold on dark web forums and messaging platforms.

These kits are sold as a service to "a growing number" of digital intruders targeting victims' Google, Microsoft, and Okta accounts, and they include real-time assistance to miscreants looking to intercept users' credentials and multi-factor authentication codes, according to a Thursday Okta Threat Intelligence blog.

"There are at least two kits that implement the novel functionality observed," Okta Threat Intelligence VP Brett Winterford told The Register. 

"The phishing kits have been developed to closely mimic the authentication flows of identity providers and other identity systems used by organizations," he said. "The kits allow the attacker to monitor the phishing page as the targeted user is interacting with it and trigger different custom pages that the target sees. This creates a more ...