T1598.004sub-technique of T1598 Phishing for Information

Spearphishing Voice

PREnothing on this site yetT1598.004 on attack.mitre.org

Adversaries may use voice communications to elicit sensitive information that can be used during targeting. Spearphishing for information is an attempt to trick targets into divulging information, frequently credentials or other actionable information.
MITRE ATT&CK 19.2, retrieved 2026-09-12

how MITRE says to see it

Detection of Spearphishing Voice

Monitor call logs from corporate devices to identify patterns of potential voice phishing, such as calls to/from known malicious phone numbers.

what reduces it

M1017 User Training. Users can be trained to identify and report social engineering techniques and spearphishing attempts, while also being suspicious of and verifying the identify of callers.

the rest of T1598

T1598.001 Spearphishing Service · not covered yet
T1598.002 Spearphishing Attachment · not covered yet
T1598.003 Spearphishing Link · not covered yet

The description, detection analytics and mitigations are reproduced from MITRE ATT&CK, version 19.2, under its terms of use. The checklists, hunts, labs and everything else linked here are this site’s.