Google’s security researchers have flagged a growing wave of attacks in which hacking groups target employees at major US financial firms directly, using social engineering tactics and software vulnerabilities to gain access to sensitive systems. Once inside, the attackers harvest financial records, personal data and other confidential material.
The stolen information is then used to extort victims, with hackers contacting them directly and demanding payment to prevent the data’s release. The tactic carries serious consequences for those targeted, from direct financial loss to lasting reputational and emotional harm, and its use against firms presumed to have strong security has raised fresh alarm.
Researchers say the groups behind the attacks rely heavily on sophisticated phishing and social engineering to trick employees into handing over access, underscoring how much modern cybersecurity depends on staff training as much as technical defences. Google is urging financial institutions to strengthen both fronts as these tactics continue to evolve.
Source: techcrunch.com
