Unplug your way to better code

This article from Cisco Talos discusses a shift in threat intelligence strategy, focusing on tracking phone numbers used in sophisticated scam campaigns. Attackers are increasingly utilizing API-driven VoIP numbers for Telephone-Oriented Attack Delivery (TOAD) operations, rotating through sequential numbers and recycling them across multiple lures. Talos is expanding its capabilities to monitor these phone number clusters, recognizing they represent a more reliable operational anchor than tracking ephemeral email addresses, and recommends security teams prioritize this approach for threat detection and response.