Voice Phishing Syndicates Unmasked - An In-Depth Investigation and Exposure

Delve into an in-depth investigation of voice phishing syndicates in this 28-minute Black Hat conference talk. Explore the sophisticated attack scenarios and social engineering techniques employed by these groups, including the use of malicious apps and impersonation of law enforcement agencies. Learn about the $4.1 billion damage caused by a single voice-phishing incident in South Korea in August 2022. Discover how attackers select victims using personal information databases and tailor their tactics based on target demographics. Examine the nine types of voice phishing malware circulating in Korea, with a focus on the 'SecretCalls' malicious app tracked for three years. Gain insights into the weaponry, infrastructure, and evolved attack methods used by voice phishing groups, as presented by Sojun Ryu and YeongJae Shin from S2W Inc.