While AI-powered cyberattacks are becoming increasingly common these days, hackers are still managing to breach companies using simple tricks. Google has warned that several hacking groups are targeting major US financial and investment firms through voice phishing (also known as "vishing"). Instead of employing advanced hacking techniques, attackers call employees on their personal phones, posing as colleagues or IT support staff. They then persuade the victims to enter their login credentials and multi-factor authentication codes on fake websites. Once they gain access, the hackers steal sensitive company data and demand payment, threatening to release the stolen information publicly if the victims refuse to pay.

According to Reuters, the targeted companies include major private equity firms such as Apollo Global Management, Bain Capital, Blackstone, Bridgewater Associates, CME Group, KKR, Moody’s, and TPG. However, Google did not officially name the victims in its report.

Google has identified the hacking groups as Falcon, Helix, Pink, and Redact. Google researchers believe these groups may be linked to a larger operation tracked as UNC6671. However, it remains unclear whether they are interconnected, operate independently, or simply share the same phishing tools.

In its report, the tech giant stated, "We believe this is likely the work of a single group of hackers collaborating and running multiple extortion brands. They may be doing this to compartmentalize their operations, obscure the true scale of data theft, and shield themselves from potential losses during negotiations."

Some of these hacking groups also operate websites where they post details about their attacks. They use these sites to pressure victims into paying ransoms by threatening to leak stolen company data.

Google stated that these same hackers have also targeted companies in the manufacturing, real estate, healthcare, insurance, technology, transportation, and hospitality sectors.

Recently, attackers have focused on legal and financial organizations. Google researchers wrote, "Targeting organizations involved in mergers, acquisitions, capital deployment, and litigation could be a strategy to target high-value corporate and confidential data, thereby increasing pressure regarding ransom demands."

Google also found that a cryptocurrency wallet linked to one of the hacking groups received approximately $10 million (about ₹83 crore) in Bitcoin during the first few months of this year. The company noted, "Initial ransom demands typically range from $1 million to over $3 million."

Disclaimer: This content has been sourced and edited from Dainik Jagran. While we have made modifications for clarity and presentation, the original content belongs to its respective authors and website. We do not claim ownership of the content.