TheRegister's platform is a leading technology news website, offering insights into IT industry news, hardware reviews, and software updates. Through articles, analysis, and opinion pieces, TheRegister offers insights into cybersecurity threats, technology trends, and industry developments. Readers can stay updated with the latest news and analysis from the world of technology and IT business.

The Register

Criminals are selling sophisticated voice-phishing kits on dark web forums that enable real-time IT helpdesk scams targeting Google, Microsoft, and Okta accounts. These kits allow attackers to create convincing fake login pages, spoof support numbers, and dynamically update phishing sites during live calls to intercept credentials and bypass multi-factor authentication. The attacks involve reconnaissance, social engineering phone calls pretending to be IT support, and real-time manipulation of fake authentication flows to capture MFA codes and push notifications. This "impersonation-as-a-service" model has evolved significantly since late 2025, with some kits recruiting native English speakers and providing complete toolkits, training, and scripts for conducting sophisticated credential theft operations.

Crims hit the easy button for IT helpdesk scams