Archive — US — techcrunch
Google says hackers are calling financial firm employees to hack and extortvictims
Google's security researchers report that unknown hacker groups are targeting U.S. financial firms using voice phishing to steal sensitive data for extortion. Firms like Apollo and Blackstone have been affected. Hacking groups, identified as Falcon, Helix, Pink, and Redact, often impersonate IT staff to obtain credentials. These extortion tactics reflect a shift toward high-value corporate data targeting, with demands ranging from $750,000 to $3 million.
Key points
- Hacker groups target large U.S. financial firms for sensitive data theft.
- Techniques include voice phishing (vishing) to trick employees into providing credentials.
- Affected firms include Apollo Global Management and Bain Capital, among others.
- Reported ransomware demands range from $750,000 to $3 million.
- Hackers may belong to a collective known as UNC6671, suggesting coordinated strategies.
- Previous targets included various sectors, reflecting the versatility of their approach.
Why it matters
- The rise of 'Phishing-as-a-Service' reflects increasing sophistication in cybercrime similar to earlier trends observed in the tech industry.
- Ongoing challenges in cybersecurity highlight the need for firms to bolster defense mechanisms.
- Similar extortion tactics have been observed historically, aligning with trends toward the targeting of high-value corporate data.
Google's findings underscore the persistence of traditional hacking methods in an evolving cyber threat landscape, particularly in finance, necessitating enhanced security protocols and awareness.