Beware the Phone Call (How to Perform Vishing Engagements)

Vishing may not be everyone’s preferred attack vector, but it remains an effective way to achieve impact during a penetration test. This talk focuses on demystifying vishing by breaking down how to prepare, build confidence, and develop realistic pretexts that make calls feel natural rather than forced.

We’ll walk through practical preparation techniques that reduce stress and improve consistency, along with strategies for adapting in real time. Through insights from actual penetration tests, we’ll demonstrate how small pieces of intelligence gathered during calls can be leveraged to refine your approach, strengthen your pretext, and increase success over time. Whether you’re new to vishing or looking to improve your approach, this session will provide actionable takeaways to help you elevate your social engineering engagements.