Google: Phone Scammers Target Major U.S. Financial Firms

Google reported August 6, 2026 that hackers tracked as UNC6671 are vishing employees at Blackstone, Apollo, Bain Capital, KKR, and TPG. Callers pose as IT staff to harvest credentials and MFA codes via spoofed sites. Stolen data is then extorted under brands like BlackFile, with ransoms starting at $750,000 and one wallet receiving roughly $10 million in Bitcoin in early 2026.