Skip to main content
Apexward Pulse
Type Incident

Ransomware

IR trends Q3 2026: Actors impersonate IT help desks in vishing attacks as ransomware activity increases

2 sources

At a glance

Low
30-day window, from the last update
Evidence-weighted, not popularity
Why Low

Low rather than Medium: UK relevance is 40 of 100, little UK-specific signal so far.

Briefing

There is no written leader briefing for this story yet. These questions come from the facts we hold.

Questions to ask IT

  • Does this reporting name any supplier, product or service we rely on?
  • Would our monitoring spot an attack like this, and who would we call if it did?

Next steps

  1. Confirm whether this affects systems or suppliers in your estate

Summary

  • Phishing remained the leading initial access technique, while percentage of ransomware and pre-ransomware cases increased. Finance and public administration tied as the top-targeted industries.
  • IR trends Q3 2026: Actors impersonate IT help desks in vishing attacks as ransomware activity increases

Read the original reportCisco Talos(opens in a new tab)

Pulse

Last checked 2d ago · Recheck overdue since 7 Nov 2026, 19:36 UK time · 1 quiet check collapsed

  1. Story29 Oct 2026, 14:02 UK time · 29 Oct

    Linked reporting from Cisco Talos (research).

    Read source (Cisco Talos)
  2. Story29 Oct 2026, 14:14 UK time · 29 Oct

    Linked reporting from Cisco Talos Blog (independent original reporter).

    Read source (Cisco Talos Blog)

2 entries so far. The timeline chart appears once this story has more history.

Sources

How we know

Statements extracted from sources. Higher confidence means stronger corroboration.

  • ClaimedHeadline60% confidence

    IR trends Q3 2026: Actors impersonate IT help desks in vishing attacks as ransomware activity increases

  • ProbableSummary fact75% confidence

    IR trends Q3 2026: Actors impersonate IT help desks in vishing attacks as ransomware activity increases