Hackers Target Major US Financial Firms in Credential Theft Campaign

Some very sneaky people called hackers are tricking workers at big money companies in the United States.

They pretend to be the company's IT helper and say the worker must update their password or security settings right away.

Then they send the worker to a fake website that looks real, where the worker types in their username and password.

While the worker is talking on the phone, the hackers grab the secret one-time codes that are sent to their phone.

This lets the hackers get into company accounts very quickly, before the worker even realizes something is wrong.

The companies that were tricked include very famous money firms like Blackstone, CME, and Moody's.

The hackers did not even need fancy computer viruses; a simple phone call was enough to do the job.

Google, a big technology company, found out about these tricks and wrote a report to warn people.

These attacks remind us that even smart computers need people to be careful about who they trust on the phone.