{
  "id": 233427,
  "title": "Google says hackers are calling financial firm employees to hack and extort victims",
  "url": "https://urgent.news/2026/08/06/google-says-hackers-are-calling-financial-firm-employees-to-hack-and",
  "topic": "tech",
  "section": "Tech",
  "published": "2026-08-06T19:40:46.000Z",
  "source": {
    "name": "TechCrunch",
    "slug": "techcrunch",
    "url": "https://techcrunch.com/2026/08/06/google-says-hackers-are-calling-financial-firm-employees-to-hack-and-extort-victims/"
  },
  "original_language": "en",
  "account": "Cybercriminals are using sophisticated methods to infiltrate and extort financial firms, according to Google's latest report. The tech giant's security researchers identified four hacking groups, named Falcon, Helix, Pink, and Redact, that have been targeting large financial and investment firms in the United States, including prominent private equity companies such as Apollo Global Management, Bain Capital, Blackstone, Bridgewater Associates, CME Group, KKR, Moody's, and TPG. The hacking groups exploit a technique known as vishing, which involves tricking employees via phone calls on personal cellphones, convincing them to enter their credentials and multi-factor codes on fake websites. Google researchers believe that these hacking groups may be part of a larger collective, tracking them under the name UNC6671. The groups not only aim to steal sensitive data but also publish it to extort victims into paying a ransom, a common strategy among cybercriminals. Google stated that the groups may be trying to compartmentalize their operations and minimize negotiation fallout. The hacking groups have also targeted other sectors, such as manufacturing, real estate, healthcare, insurance, tech, transportation, and hospitality. In a recent incident, a cryptocurrency wallet linked to one of the hacking groups received approximately $10 million in Bitcoin within the first few months of this year. Typically, the hackers demand between $750,000 and $3 million from their victims. However, Apollo Global Management, Bain Capital, Blackstone, Bridgewater Associates, CME Group, KKR, Moody's, and TPG declined to comment on the matter.",
  "summary": "Google's security researchers have reported that hackers are targeting large financial and investment firms in the United States, including prominent private equity firms, through a tactic known as voice phishing, or \"vishing.\" The hackers impersonate coworkers or IT staff via phone calls, attempting to trick employees into entering their credentials and multi-factor codes on spoofed websites. This age-old hacking technique still proves effective in stealing sensitive data and extorting victims with the threat of publishing it. The hacking groups, identified as Falcon, Helix, Pink, and Redact, run websites where they publicize their hacks and threaten to leak stolen data to extort victims into paying ransom. These groups, which may belong to a larger collective tracked by Google as UNC6671, are targeting various industries, including manufacturing, real estate, healthcare, insurance, tech, transportation, and hospitality, as well as legal and financial organizations. The hackers demand ransom ranging from $750,000 to $3 million from their victims.",
  "key_points": [],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}