Mandiant reports voice-based phishing calls accounted for 11% of intrusions in 2025. Threat groups tied to The Com and Scattered Spider offshoots used the tactic in large campaigns that targeted Salesforce customers. Email phishing fell to 6%, while exploited vulnerabilities remained the top initial access vector at 32%.
Part of the PlainSec briefing for 2026-03-25