{"id":9622,"date":"2026-08-07T08:12:03","date_gmt":"2026-08-07T08:12:03","guid":{"rendered":"https:\/\/koshalsambada.in\/?p=9622"},"modified":"2026-08-07T08:12:03","modified_gmt":"2026-08-07T08:12:03","slug":"google-warns-blackstone-bridgewater-bain-capital-kkr-tpg-moodys-targeted-by-hackers-through-phone-calls-shares-hacker-used-for-attack","status":"publish","type":"post","link":"https:\/\/koshalsambada.in\/?p=9622","title":{"rendered":"Google warns Blackstone, Bridgewater, Bain Capital, KKR, TPG, Moody&#8217;s targeted by hackers through phone calls; shares hacker used for attack"},"content":{"rendered":"<p><br \/>\n<\/p>\n<div>\n<div class=\"e9jwa\">\n<div class=\"vdo_embedd\">\n<div class=\"GfdvZ\">\n<section class=\"_bIDB  clearfix id-r-component leadmedia undefined undefined  E9tg9 \" style=\"top:0px\">\n<div class=\"_bIDB\" data-ua-type=\"1\" onclick=\"stpPgtnAndPrvntDefault(event)\">\n<div class=\"ypVvZ\">\n<div class=\"WGttI\"><img src=\"https:\/\/static.toiimg.com\/thumb\/msid-133027173,imgsize-43257,width-400,height-225,resizemode-4\/google.jpg\" alt=\"Google warns Blackstone, Bridgewater, Bain Capital, KKR, TPG, Moody's targeted by hackers through phone calls; shares hacker used for attack\" title=\"Google warns Blackstone, Bridgewater, Bain Capital, KKR, TPG, Moody's targeted by hackers\" decoding=\"async\" fetchpriority=\"high\"\/><\/div>\n<\/div>\n<\/div>\n<div class=\"Ta7d_ img_cptn\"><span title=\"Google warns Blackstone, Bridgewater, Bain Capital, KKR, TPG, Moody's targeted by hackers\">Google warns Blackstone, Bridgewater, Bain Capital, KKR, TPG, Moody&#8217;s targeted by hackers<\/span><\/div>\n<\/section>\n<\/div><\/div>\n<\/div>\n<p>Google has revealed that ransom-seeking hackers have targeted dozens of major US financial institutions and businesses in recent weeks, including Blackstone, Bridgewater Associates, Bain Capital, KKR, TPG, and Moody\u2019s.<!-- --> According to a report by Reuters, the attackers used phone calls to trick employees into revealing credentials, then deployed malicious websites tailored to each firm. \u201cGoogle Threat Intelligence Group (GTIG) continues to track UNC6671 actively conducting compromises leading to data theft extortion, despite the alleged announced retirement of the BlackFile extortion brand in May 2026. Telemetry and infrastructure analysis reveal that rather than disbanding, UNC6671 has diversified its operations across multiple extortion fronts including Redact, Pink, Helix, and Falcon,\u201d said Google in a blog post.<span class=\"id-r-component br\" data-pos=\"5\"\/><\/p>\n<p><h2>Google\u2019s findings revealed how hackers operated<\/h2>\n<\/p>\n<p><span class=\"id-r-component br\" data-pos=\"7\"\/>In a blog post, Google said the hackers operate under aliases such as Redact, Pink, Falcon, and Helix, and have recently shifted focus to private equity firms, law practices, and ratings agencies. Some companies reportedly paid ransoms, though Google did not name them. Reuters analysis of 72 malicious websites linked to the campaign showed traps designed for more than 200 companies in the past five weeks.<span class=\"id-r-component br\" data-pos=\"9\"\/>\u201cUNC6671 continues to rely on voice phishing (vishing) to target enterprise employees, posing as IT helpdesk staff facilitating mandatory, urgent security migrations. Significantly, the threat actor often contacts employees via their personal mobile devices. These calls lure victims to spoofed login portals where Adversary-in-the-Middle (AiTM) infrastructure intercepts credentials and multi-factor authentication (MFA) tokens.<!-- --> Once session persistence is established, the actors deploy automated scripts for data exfiltration from enterprise cloud environments, including Microsoft 365 and Okta,\u201d added Google.<span class=\"id-r-component br\" data-pos=\"16\"\/><\/p>\n<p><h2>Human element exploited<\/h2>\n<\/p>\n<p><span class=\"id-r-component br\" data-pos=\"18\"\/>Cyber experts noted that the attackers rely on low-tech but effective tactics. \u201cBecause the fence is now so fancy and high-tech, we just have to trick the guard into opening the door for us,\u201d said Lee Clark of the Retail and Hospitality ISAC. Google\u2019s Austin Larsen added: \u201cReally, it\u2019s a money thing. They think these firms have sensitive data worth paying to protect.\u201d<span class=\"id-r-component br\" data-pos=\"20\"\/>Beyond Wall Street, firms such as Uber, Zillow, Levi Strauss, and law firms including Paul Hastings and Greenberg Traurig were also targeted. Hedge funds like Point72, Two Sigma, and Citadel were among those approached by hackers.<\/div>\n<p><br \/>\n<br \/><a href=\"https:\/\/timesofindia.indiatimes.com\/technology\/tech-news\/google-warns-blackstone-bridgewater-bain-capital-kkr-tpg-moodys-targeted-by-hackers-through-phone-calls-shares-hacker-used-for-attack\/articleshow\/133026901.cms\" target=\"_blank\" rel=\"noopener\">Source link <\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Google warns Blackstone, Bridgewater, Bain Capital, KKR, TPG, Moody&#8217;s targeted by hackers Google has revealed that ransom-seeking hackers have targeted dozens of major US financial institutions and businesses in recent weeks, including Blackstone, Bridgewater Associates, Bain Capital, KKR, TPG, and Moody\u2019s. According to a report by Reuters, the attackers used phone calls to trick employees [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":9623,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[31],"tags":[],"class_list":["post-9622","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-31"],"magazineBlocksPostFeaturedMedia":{"thumbnail":"https:\/\/koshalsambada.in\/wp-content\/uploads\/2026\/08\/1786090324_google.jpg","medium":"https:\/\/koshalsambada.in\/wp-content\/uploads\/2026\/08\/1786090324_google.jpg","medium_large":"https:\/\/koshalsambada.in\/wp-content\/uploads\/2026\/08\/1786090324_google.jpg","large":"https:\/\/koshalsambada.in\/wp-content\/uploads\/2026\/08\/1786090324_google.jpg","1536x1536":"https:\/\/koshalsambada.in\/wp-content\/uploads\/2026\/08\/1786090324_google.jpg","2048x2048":"https:\/\/koshalsambada.in\/wp-content\/uploads\/2026\/08\/1786090324_google.jpg","blogsy-small":"https:\/\/koshalsambada.in\/wp-content\/uploads\/2026\/08\/1786090324_google.jpg","blogsy-small-tall":"https:\/\/koshalsambada.in\/wp-content\/uploads\/2026\/08\/1786090324_google.jpg","blogsy-small-square":"https:\/\/koshalsambada.in\/wp-content\/uploads\/2026\/08\/1786090324_google.jpg","blogsy-small-masonry":"https:\/\/koshalsambada.in\/wp-content\/uploads\/2026\/08\/1786090324_google.jpg","blogsy-medium":"https:\/\/koshalsambada.in\/wp-content\/uploads\/2026\/08\/1786090324_google.jpg","blogsy-medium-masonry":"https:\/\/koshalsambada.in\/wp-content\/uploads\/2026\/08\/1786090324_google.jpg","blogsy-large":"https:\/\/koshalsambada.in\/wp-content\/uploads\/2026\/08\/1786090324_google.jpg","blogsy-wide":"https:\/\/koshalsambada.in\/wp-content\/uploads\/2026\/08\/1786090324_google.jpg"},"magazineBlocksPostAuthor":{"name":"admin","avatar":"https:\/\/secure.gravatar.com\/avatar\/8709732a479614e7a8aa24d3eb1b239f30dc6d90c61464ed495001e7a469d856?s=96&d=mm&r=g"},"magazineBlocksPostCommentsNumber":"0","magazineBlocksPostExcerpt":"Google warns Blackstone, Bridgewater, Bain Capital, KKR, TPG, Moody&#8217;s targeted by hackers Google has revealed that ransom-seeking hackers have targeted dozens of major US financial institutions and businesses in recent weeks, including Blackstone, Bridgewater Associates, Bain Capital, KKR, TPG, and Moody\u2019s. According to a report by Reuters, the attackers used phone calls to trick employees [&hellip;]","magazineBlocksPostCategories":["\u0b26\u0b47\u0b36 \u0b2c\u0b3f\u0b26\u0b47\u0b36"],"magazineBlocksPostViewCount":1,"magazineBlocksPostReadTime":2,"magazine_blocks_featured_image_url":{"full":["https:\/\/koshalsambada.in\/wp-content\/uploads\/2026\/08\/1786090324_google.jpg",400,225,false],"medium":["https:\/\/koshalsambada.in\/wp-content\/uploads\/2026\/08\/1786090324_google.jpg",300,169,false],"thumbnail":["https:\/\/koshalsambada.in\/wp-content\/uploads\/2026\/08\/1786090324_google.jpg",150,84,false]},"magazine_blocks_author":{"display_name":"admin","author_link":"https:\/\/koshalsambada.in\/author\/admin"},"magazine_blocks_comment":0,"magazine_blocks_author_image":"https:\/\/secure.gravatar.com\/avatar\/8709732a479614e7a8aa24d3eb1b239f30dc6d90c61464ed495001e7a469d856?s=96&d=mm&r=g","magazine_blocks_category":"<a href=\"#\" class=\"category-link category-link-31\">\u0b26\u0b47\u0b36 \u0b2c\u0b3f\u0b26\u0b47\u0b36<\/a>","_links":{"self":[{"href":"https:\/\/koshalsambada.in\/index.php?rest_route=\/wp\/v2\/posts\/9622","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/koshalsambada.in\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/koshalsambada.in\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/koshalsambada.in\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/koshalsambada.in\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=9622"}],"version-history":[{"count":0,"href":"https:\/\/koshalsambada.in\/index.php?rest_route=\/wp\/v2\/posts\/9622\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/koshalsambada.in\/index.php?rest_route=\/wp\/v2\/media\/9623"}],"wp:attachment":[{"href":"https:\/\/koshalsambada.in\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=9622"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/koshalsambada.in\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=9622"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/koshalsambada.in\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=9622"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}