Twilio-based automated vishing call creation with DTMF gather webhook callbacks

Ibrahim Saud@tektrix

•updated Sep 23, 2026•0•0•2

Detects the AnonyMousKIT vishing activity pattern by monitoring Twilio API call creation events followed by specific status or gather webhook callbacks from the same host within a one-hour window, consistent with automated voice phishing to collect DTMF-entered passcodes.