All Quanta Team Members,
As an FYI: We have recently seen an increase in voice phishing (“vishing”) attacks targeting Quanta employees. Attackers are calling people by phone, pretending to be Quanta IT, Quanta leadership, or trusted vendors — and asking for passwords, MFA codes, or remote access to your computer.
To be clear: Quanta IT will never call you and ask for your password, your MFA code, or for you to install remote access software. If someone calls you and asks for any of those things, it is not us. Hang up.
Here’s what these calls can look like:
- “This is IT — we need to verify your account.” They’ll say there’s a problem with your account, your email, or your VPN. They’ll sound professional and may even know your name, your title, or your operating company. They’ll ask you to “confirm” your password or read them a code from your phone. This is not real. Hang up.
- “I’m going to send you a login prompt — go ahead and approve it.” An attacker who already has your password may call you and try to get you to approve the MFA prompt they just triggered. If you did not initiate a login yourself, do not approve it — no matter who is on the phone telling you to.
- “We need you to install a tool so we can fix your machine remotely.” No one from Quanta IT will ever ask you to install remote access software (like AnyDesk, TeamViewer, or similar) over the phone. If someone asks you to do this, it is an attack. Hang up immediately.
What I need you to do:
Treat every unexpected call asking for credentials, codes, or access the same way you’d treat a suspicious email — don’t trust it. If you’re unsure, hang up and call the person back using a number you already know. Not a number the caller gives you.
If you received one of these calls and provided your information to them, please report it to:
Quanta Security Hotline: 713-335-7777 → Option 2
You will never get in trouble for reporting something suspicious. Your instinct to pause and verify is our strongest defense.
Stay sharp,
