Private equity firms have become the latest target of ransom-seeking hackers who use voice phishing to trick company employees, according to a new Google report.
The report withheld the names of the firms targeted. Reuters worked them out by feeding the 72 web addresses Google published into tools like DomainTools and urlscan, which surfaced subdomains matched to each company.
In its latest report, Google Threat Intelligence Group (GTIG) said it continues to track a group known as UNC6671. The actors rely on voice phishing (vishing), posing as IT helpdesk staff pushing urgent security updates.
They often reach employees on personal mobile devices. The calls direct victims to spoofed login portals.
There, adversary-in-the-middle (AiTM) systems intercept credentials and multi-factor authentication (MFA) tokens. Once inside, the hackers run automated scripts to pull data from cloud services like Microsoft 365 and Okta.
“These operations uniformly leverage tailored IT helpdesk voice phishing (vishing), AiTM credential harvesting panels, and data theft from SaaS applications,” the report read.
Follow us on X to get the latest news as it happens
The choice of victims shifted over the summer. Through June, the group leaned toward technology, transport, and hospitality names, chasing trade secrets, code, and client data.
The following month, it turned to money and law. Google saw the group’s infrastructure pointed at private equity firms, law firms, and financial rating agencies.
According to Reuters, hackers created fake sites to lift passwords from staff at several firms. The outlet listed Blackstone, Bridgewater Associates, Apollo Global Management, Bain Capital, KKR, TPG, CME Group, Clearlake Capital, and Moody’s, among others.
Google said some firms paid up, without naming them. Reuters also could not pin down which targets were actually breached.
The campaign highlights how old-school techniques still beat modern defenses. Firms spend heavily on security software, yet a single phone call can walk past all of it.
Subscribe to our YouTube channel to watch leaders and journalists provide expert insights
The post Phone-Scam Hackers Now Target Wall Street’s Biggest Firms appeared first on BeInCrypto.
Sanctions on crypto exchanges may heighten geopolitical tensions, driving investors toward gold as a safe-haven asset amid financial instability. The post US Treasury sanctions crypto
The sanctions could hinder diplomatic efforts, reducing the likelihood of a U.S.-Iran nuclear deal and escalating economic tensions. The post US Treasury sanctions crypto exchanges
Bitfinex has reported a marginal dip in Bitcoin long-term holder supply, marking the first decline since April. This development, noted in a recent tweet, indicates
XRP is taking the Clarity Act news harder than the rest of the crypto market. Here’s why.
Blockchain Bodega is here and you know the vibes. We’re at the intersection of hip-hop culture and web3, exploring this new digital frontier. Who better to guide you through these uncharted lanes than Ock Chain – The Bitcoin Boss and the Consensus Corner Boys?
Ock Chain doesn’t just cook up random details about cryptocurrency; he lives it. Ock’s been deep in the game since Bitcoin was just a baby.
And let’s not forget about the Consensus Corner Boys. They’re our skilled crew of blockchain enthusiasts. They’re here to educate, entertain, and enlighten.
Welcome to Blockchain Bodega!
Copyright © 2023 Blockchain Bodega. All rights reserved.