Google says hackers are calling financial firm employees to hack and extort victims

Hackers are targeting large U.S. financial firms by calling employees on their personal phones, pretending to be coworkers or IT staff to trick them into giving up credentials and multi-factor authentication codes. Google's security researchers identified the groups as Falcon, Helix, Pink, and Redact, which may be part of a larger collective called UNC6671. The attackers steal sensitive data and extort victims by threatening to leak it, using websites to publicize their hacks.