CYBERSECURITYTRACKER
TRACKING6,506 stories in this site build1,309 vulnerability news stories in this site build
Permanent story citation

The script, not the voice, is what makes AI voice phishing work

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 2740

As cited

Copy frozen at (site build).

threat intel

The script, not the voice, is what makes AI voice phishing work

Researchers from Harvard Kennedy School, Meta, and other institutions conducted a study of over 4,100 US adults to evaluate the effectiveness of voice phishing attacks. The research tested commercial voice systems and human callers using a scenario where an attacker poses as a senior manager requesting credential information, finding that the scripted social engineering approach was the primary factor in attack success rather than the voice synthesis quality.

Why it matters: Security awareness and identity teams need to know that attackers can achieve high phishing success rates regardless of voice quality, making script-based social engineering training and caller verification procedures critical defenses against both synthetic and human voice attacks.

Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary