Google Warns Financial Firms of Phone Vishing Attacks for Corporate Extortion

Google's Threat Analysis Group (TAG) has published a security advisory detailing an active social engineering campaign targeting employees at major financial services firms. Cybercriminals are using voice phishing (vishing) phone calls—often spoofing internal IT support numbers—to trick employees into installing malicious remote desktop software and surrendering multi-factor authentication credentials. Once access is established, threat actors move laterally through internal corporate networks to extract sensitive financial records, customer data, and source code. The attackers then issue high-dollar extortion demands, threatening public leak of data if ransoms are not paid.

Security experts emphasize that AI-enabled voice cloning tools are increasing the believability of vishing attacks. Organizations are advised to enforce strict out-of-band verification procedures for all helpdesk requests and adopt hardware security keys for critical system access.