Google says hackers are calling financial firm employees to hack and extort victims

Hackers are targeting large US financial firms by posing as employees and making phone calls to gain access to sensitive information, according to Google's security researchers. This social engineering tactic allows attackers to bypass traditional security measures and steal valuable data, which is then used to extort victims. The groups of hackers, identified by Google, exploit human vulnerability rather than relying on complex technical exploits like CVEs. By doing so, they can evade detection and infiltrate even well-secured systems. Google's findings highlight the importance of robust employee training and verification processes to prevent such attacks¹. The success of these tactics underscores the need for financial institutions to prioritize insider threat mitigation and implement effective incident response plans. This matters to security practitioners because it emphasizes the significance of addressing the human factor in cybersecurity, as sophisticated social engineering attacks can compromise even the most secure systems.