What is 'vishing' (voice phishing) targeting mobile banking customers, and what specific call spoofing technology makes modern vishing attacks more convincing?

• A.A. Vishing requires the attacker to compromise the carrier's SS7 network to intercept calls; this is not commercially available
• B.B. Vishing attackers call victims impersonating bank fraud departments; modern attacks use VoIP caller ID spoofing (easily purchased from VoIP providers) to display the victim's real bank phone number on the incoming call; this legitimacy signal (the number matching what's printed on the victim's card) combined with social engineering (urgent fraud alert scripts, pressure to transfer money to 'safe accounts') achieves high success rates even with security-aware users
• C.C. Vishing only works against elderly victims; younger demographics can detect VoIP call characteristics by audio quality