Fake IT Calls are Hitting Law Firms
Learn how fake help desk calls unfold and the verification checks that stop them before anyone approves a prompt.
Is that really your help desk calling?
Multiple threat actors are targeting law firms right now, and attempts have picked up in recent weeks. Most start with a call or Teams message from someone posing as the firm’s own IT help desk. Callers spoof internal phone numbers, use real help desk names, and contact several employees at once.
The goal is to get one person to approve a prompt or hand over a login. No technical vulnerability is required, just a voice that sounds familiar and a request that sounds routine.
Travis Wong, VP of Customer Engagement, and Joe Ippolito, Sr. Analyst, Cyber Loss Control, will walk through how these calls unfold, a verification routine for inbound IT calls and Teams messages that you can start using this week, and the first steps to take if someone has already approved a prompt.
About the Speakers
Joe Ippolito
Sr. Analyst, Cyber Loss Control
Joe Ippolito is a Senior Analyst, Cyber Loss Control, at Resilience and a cybersecurity executive with 25 years of active-duty service in the U.S. Air Force. Throughout his career, he drove organizational transformation through visionary leadership and clear strategic direction. As the Cyber Warfare Operations Career Field Manager, the highest functional position in the field, he was responsible for training and developing 2,100 personnel who carry out the Air Force’s offensive and defensive cyber operations mission.
Joe excels at building and leading cross-functional teams and fostering the collaboration needed to achieve mission-critical goals. A persuasive communicator, he has built strong networks among C-level executives, senior decision-makers, and key stakeholders, keeping business objectives and cybersecurity policy aligned. He is also an experienced technical writer whose work on cybersecurity force development contributed to the National Defense Authorization Act.
Travis Wong
VP, Customer Engagement
Travis Wong is the VP of Customer Engagement at Resilience. He leads the Security and Risk Services and Customer Success teams and brings over 15 years of experience in risk management consulting, helping clients assess, measure, and manage their risk effectively.
Any company that sells hardware or software with network connectivity into an EU member state has to report vulnerabilities and incidents affecting that product. The regulation calls these products with digital elements, and it applies to the manufacturer regardless of where the manufacturer is based, so a US firm with no EU presence is covered from the moment its first unit ships into the single market.