What is vishing and smishing?
D2 · Threats · CompTIA Security+ SY0-701Vishing (voice phishing) uses phone calls to trick victims into revealing sensitive information. Attackers impersonate banks, tech support, IRS agents, or executives (CEO fraud).
Smishing (SMS phishing) uses text messages with malicious links or urgent requests. Often impersonates package delivery services, banks, or government agencies.
Vishing techniques: caller ID spoofing (making calls appear from legitimate numbers), deepfake voice (AI-generated voice cloning), pretexting (fabricated scenarios).
Smishing often leads to credential-harvesting fake websites.
Smishing (SMS phishing) uses text messages with malicious links or urgent requests. Often impersonates package delivery services, banks, or government agencies.
Vishing techniques: caller ID spoofing (making calls appear from legitimate numbers), deepfake voice (AI-generated voice cloning), pretexting (fabricated scenarios).
Smishing often leads to credential-harvesting fake websites.
Know all phishing variants for the exam: Phishing (email), Spear phishing (targeted email), Whaling (targeting executives), Vishing (voice/phone), Smishing (SMS). AI voice cloning has made vishing significantly more effective. Never provide sensitive info to unsolicited callers — hang up and call back on a verified number.