KnowBe4 adds advanced simulated vishing capabilities to combat voiced-based threats

KnowBe4, a global leader in digital workforce security, is introducing its new simulated vishing capability designed to help organizations close the gap in security awareness: the phone channel.

“An urgent phone call from someone pretending to be your IT department or a C-level executive creates instant pressure, and cybercriminals are using AI voice cloning to make these calls unbelievably convincing,” said Greg Kras, chief product officer, KnowBe4. “To build true organizational resilience, security teams can no longer focus solely on the inbox. With our new simulated vishing capability, we are equipping security leaders with the tools needed to train employees across every major social engineering vector to prevent these types of attacks.”

According to the company, simulated vishing is now available within the attack and simulation pillar of the KnowBe4 Platform, aimed to protect both humans and AI agents.

Vishing simulation results feed the same reporting and risk visibility organizations already rely on for phishing and training data, influencing the Risk Score, which highlights one unified view of human and AI risk across channels.

Highlights of the new capability include:

• Training for Evolving Threats: Extends security awareness training to the phone channel, one of the fastest-growing and least-tested vectors for social engineering.
• Real-World Resilience: Employees practice recognizing live, high-pressure phone tactics in a safe environment, rather than encountering them for the first time from a real attacker.
• Visibility for Security Leaders: Reporting on vishing susceptibility gives security leaders the same data-driven view of voice-based risk that contributes to the overall Risk Score.
• Real Attacker Tactics: Local caller ID, realistic personas, and multi-step customizable scenarios mirror how modern vishing attacks are carried out.

“The organizations getting breached this year were not tricked by a generic phone scam script, but rather by a patient, adaptive conversation that felt legitimate at every step," Kras added. "Training employees against anything less than that is not training them for the threat they will actually face."

For more information about this news, visit www.knowbe4.com.