Identity threats and support operations. https://fctr.io/blog/ 2026-10-29T00:00:00.000Z https://fctr.io/blog/test-it-caller-verification/ 2026-10-20T00:00:00.000Z 2026-10-20T00:00:00.000Z

Three practical checks for IT caller verification: can employees find the trusted app, complete the check, and stop safely when verification fails?

Fctr Identity https://fctr.io/blog/introducing-netra-ai-microsoft-entra-id/ 2026-10-11T00:00:00.000Z 2026-10-11T00:00:00.000Z

Get answers about your Microsoft Entra ID tenant in plain English. Meet Netra AI, a self-hosted agent for directory questions, follow-ups, and CSV exports.

Fctr Identity https://fctr.io/blog/okta-mfa-downgrade-caller-verification/ 2026-10-07T00:00:00.000Z 2026-10-07T00:00:00.000Z

Okta recommends a way to verify IT support callers as attackers push MFA downgrades. See how Fctr fits alongside strong authentication policies.

Fctr Identity https://fctr.io/blog/gartner-deepfake-caller-verification/ 2026-09-22T00:00:00.000Z 2026-09-23T00:00:00.000Z

Gartner reports deepfake social engineering on employee calls. See how Fctr verifies callers and protects supported helpdesk actions using existing factors.

Fctr Identity https://fctr.io/blog/clickfix-fake-it-support/ 2026-09-16T00:00:00.000Z 2026-09-16T00:00:00.000Z

ClickFix can turn fake IT support into malicious command execution. See how Fctr helps employees verify IT callers before following instructions.

Fctr Identity https://fctr.io/blog/microsoft-entra-verified-id-identity-verification/ 2026-09-08T00:00:00.000Z 2026-09-08T00:00:00.000Z

Learn how Microsoft Entra Verified ID differs from authentication factors, why it is practical for Microsoft environments, and how Fctr brings it into helpdesk workflows.

Fctr Identity https://fctr.io/blog/spring-ring-microsoft-teams-vishing/ 2026-09-02T00:00:00.000Z 2026-10-29T00:00:00.000Z

Microsoft and Unit 42 document IT support impersonation through Teams. Learn how to verify callers before remote access, with lessons from Spring Ring.

Fctr Identity https://fctr.io/blog/fake-it-support-verify-person-not-channel/ 2026-08-27T00:00:00.000Z 2026-08-30T00:00:00.000Z

ReliaQuest and Expel documented IT-impersonation attacks involving real MFA and Microsoft systems. McKesson later confirmed a separate data-exfiltration incident.

Fctr Identity https://fctr.io/blog/email-bombing-fake-it-support-verification/ 2026-08-20T00:00:00.000Z 2026-10-29T00:00:00.000Z

Email bombing can create urgency before an attacker impersonates IT in Teams and asks for Quick Assist. Verify the support caller before remote access begins.

Fctr Identity https://fctr.io/blog/helpdesk-caller-id-passkey-vishing/ 2026-08-06T00:00:00.000Z 2026-10-29T00:00:00.000Z

Mandiant tracks fake IT calls using passkey and MFA changes as a pretext. Canada's Cyber Centre now warns legal and financial firms to verify unexpected IT calls.

Fctr Identity https://fctr.io/blog/account-unlock-verification-workflow/ 2026-08-05T00:00:00.000Z 2026-09-11T00:00:00.000Z

Verify the employee before unlocking an account. See a helpdesk workflow using existing Entra ID or Okta factors, role checks, and connected audit evidence.

Fctr Identity https://fctr.io/blog/device-code-vishing-caller-verification/ 2026-08-05T00:00:00.000Z 2026-09-11T00:00:00.000Z

Microsoft reports passkey-themed vishing that leads to device code phishing. Learn how to verify IT support callers before following sign-in instructions.

Fctr Identity https://fctr.io/blog/security-questions-helpdesk-verification/ 2026-08-05T00:00:00.000Z 2026-09-11T00:00:00.000Z

How should a helpdesk verify a caller before a password reset? Use a trusted employee record, an approved factor, and a policy-controlled recovery workflow.

Fctr Identity