Cybercriminals are increasingly targeting businesses with sophisticated phone-based attacks designed to trick employees into handing over access to their accounts. OzComm is issuing this advisory so your team knows what to look for.
What is happening
- Vishing (voice phishing): Attackers call employees directly, posing as IT support, a software vendor, or a security team. The calls sound convincing and the caller may know your name or company details.
- MFA fatigue: While on the phone, the attacker repeatedly sends Multi-Factor Authentication (MFA) push notifications to your device. They then pressure you to approve one, claiming it will "stop suspicious activity," "restore your access," or "verify your account."
- What they gain: Approving that MFA request gives the attacker direct access to your account and potentially your entire business system.
What legitimate IT support will never do
- Call you unexpectedly and ask you to approve an MFA push notification
- Ask for your password or authentication code over the phone, by email, or via chat
- Pressure you to act immediately to prevent a security incident
- Request remote access to your device unless you contacted them first and they can provide a valid support reference number
What to do if you receive a suspicious call
- Do not approve any MFA prompts — deny or dismiss them
- Do not answer questions about your account or credentials
- Disconnect the call
- Contact OzComm immediately to report the incident
If you receive repeated MFA notifications you did not initiate, treat your account as potentially compromised and call us straight away. Quick action gives us the best chance to protect your account before any damage is done.
If you have questions or want to brief your team on this threat, contact OzComm on 07 3395 5522 or david@ozcomm.com.au.