Google Warns of Phone-Based Cyberattacks Targeting Wall Street Firms

Google's security researchers have identified several hacking groups that are targeting large financial and investment firms in the United States using phone-based social engineering tactics.

The hackers, who Google has labeled as 'Falcon', 'Helix', 'Pink', and 'Redact', contact employees on their personal mobile phones, creating a sense of urgency and legitimacy to convince them to hand over login credentials and multi-factor authentication codes through fake websites.

These groups are reportedly using spoofed websites designed to resemble corporate login portals, allowing hackers to gain access to internal systems, sensitive documents, and cloud environments.

The financial scale of the campaign appears significant, with individual ransom demands ranging from $750,000 to $3 million per victim. Google also noted that similar actors have previously targeted companies in various sectors, seeking intellectual property, source code, and sensitive client information.