Definition
Vishing, or voice phishing, is a type of social engineering attack where criminals use phone calls to deceive individuals into revealing sensitive information or performing actions that compromise security. Attackers often impersonate legitimate organizations or individuals, such as bank representatives or tech support, to gain trust. This tactic leverages the perceived authenticity of a voice conversation to trick victims into divulging personal data like credit card numbers, social security numbers, or login credentials. For example, a scammer might call claiming to be from your bank, stating there's a problem with your account and asking for your verification details. Unlike phishing, which relies on email or text messages, vishing directly engages the victim through spoken communication, making it harder to detect by automated filters. Understanding vishing is crucial for cybersecurity professionals and is a common topic on certifications like CompTIA Security+ and CISSP.