Email Bombing Followed by Quick Assist/AnyDesk Remote Session (Vishing IT Suppor

Ibrahim Saud@tektrix

•updated 10 days ago•0•0•1

Detects a potential vishing or technical support scam scenario by identifying a burst of email traffic to a user (email bombing) followed within one hour by the execution of a remote assistance tool (Quick Assist, Microsoft Remote Assistance, or AnyDesk) on the same user's endpoint.