John Z Black

Helpdesk Squeeze: BlackFile and the Vishing Revival

John Z Black Apr 27, 2026

Threat Intelligence #vishing #social-engineering #ransomware #retail #mfa-bypass

A new extortion group called BlackFile is making millions by doing something shockingly low-tech: calling your helpdesk and asking them to hand over access.

Read More

The CFO on Your Screen Might Not Be Real

John Z Black Apr 16, 2026

AI Security #deepfake #AI Security #social engineering #vishing #identity fraud

Attackers deepfaked a CFO on a live Zoom call and walked away with $25.6M. Detection tools get it wrong half the time. Here's what actually works.

Read More

An Identity Theft Protection Company Was Just Hacked by a Phone Scammer

John Z Black Mar 22, 2026

Incidents & Breaches #data-breach #vishing #social-engineering #identity-protection #aura #consumer-security

Aura sells identity protection. A scammer called one employee, said the right things, and walked out with data on 900,000 people. The irony is real, but the lesson is bigger.

Read More