IT help desks are under attack
Attackers don’t break MFA. They call your help desk.
RSA Help Desk Live Verify (patent pending) stops ransomware, social engineering, and technical support scams at the point where they start: the support call. Part of RSA ID Plus, the first-of-its-kind capability uses bi-directional identity verification to confirm that both users and IT staff are who they say they are—shutting down attackers impersonating either side of the call.
Read on to learn how RSA Help Desk Live Verify works, why it matters, and watch the demos to see it in action.
Why the help desk is the target
Threat groups like Scattered Spider target IT help desks for three reasons:
- Humans are the easiest way in. Socially engineering an operator is faster and more reliable than breaking multi-factor authentication (MFA).
- Help desks hold the keys. Agents can create accounts, reset passwords, and suspend MFA — actions that reshape an organization’s security posture and open the door to ransomware.
- The damage is measured in hundreds of millions. A help desk attack cost Marks & Spencer hundreds of millions of dollars. Scattered Spider used the same tactic against MGM Resorts and Caesars Entertainment, launching ransomware attacks that produced massive losses and fines. Threat actors have run the same playbook against healthcare help desks.
See RSA Help Desk Live Verify in action
Four demos. Four scenarios. One outcome: mutual trust between end users and admins, verified before any action is taken.