Summary:
- Google’s Threat Analysis Group (TAG) has identified a sophisticated social engineering campaign where attackers impersonate IT support to trick financial firm employees.
- The attackers use phone-based deception to gain remote access to corporate networks, eventually leading to data extortion and ransomware deployment.