Google warns Blackstone, Bridgewater, Bain, KKR, TPG, Moody’s of phone hack
Recent reports from Google reveal that hackers have set their sights on prominent US financial companies, employing cunning phone scams to extract sensitive credentials from employees. Following this, they launched customized malicious websites designed specifically for each target. Shifting their attention to private equity firms, these assailants have allegedly compelled some businesses to pay…
Google has warned Blackstone, Bridgewater Associates, Bain Capital, KKR, TPG, Moody’s, and other major US financial institutions about a phone hacking campaign. According to a Reuters report, hackers used voice phishing (vishing) tactics to trick employees into revealing credentials. These attacks involved setting up spoofed login portals that intercepted credentials and multi-factor authentication (MFA) tokens.
Once they gained access, the attackers deployed automated scripts for data exfiltration from enterprise cloud environments, including Microsoft 365 and Okta. While some companies reportedly paid ransoms, Google did not disclose which firms they were. The hackers, operating under aliases like Redact, Pink, Helix, and Falcon, have shifted their focus to private equity firms, law practices, and ratings agencies.
The threat actor primarily targets employees via their personal mobile devices, exploiting the human element through low-tech but effective tactics.
Written by urgent.news from Times of India's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
