Tia N.List

Reported by 2 outlets

Telegram Vishing Ad Recruits Callers for Fake Google Security Team

hot0.0
Why this score
Breadth
1.00 / 2.0 · 2 sources
Authority
1.50 / 2.0 · best outlet weight
Severity
0.50 / 5.0 · CVSS + content signals
Velocity
0.00 / 2.0 · updates in 48h
Pickup speed
0.60 / 0.6 · time to second source
Recency
× 0.00 temporal multiplier
Community
+ 0.00 / 1.5 · reddit signal
Score
0.0 / 10 = base × recency + community
intel.threadlinqs.comtheregister.com first seen 16d ago

Analysis

A Telegram vishing operation recruits callers for a fake Google Security Team, advertising "no script reading" then supplying the exact script. The campaign carries 9 detections and 5 IOCs per threat-intel source, and The Register covered it on September 25. It is an active voice-phishing recruitment channel, not a technical vulnerability, and the script dissemination makes it more dangerous than a generic scam.

Watch for replication of the same recruitment pattern on other messaging platforms and for updates linking the 5 IOCs to actual victim reports. The gap between recruitment and execution is where defenders can intercept.

Timeline

  1. update from www.theregister.com

    Fake Google Security Team ad says 'no script reading' in voice phishing - then prints the script Source: The Register - Security Read: https

    www.theregister.com · 16d ago · September 27th, 2026

    Fake Google Security Team ad says 'no script reading' in voice phishing - then prints the script Source: The Register - Security Read: https

    via Mastodon https://www.theregister.com/security/2026/09/25/fake-google-security-team-ad-says-no-script-reading-in-voice-phishing-then-prints-the-script/5299264

Source on GitHub