Hackers targeted Wall Street firms with just a single phone call.

Google stated that hackers created 72 fake websites targeting employees of Blackstone, Bridgewater, Apollo, KKR, Bain Capital, TPG, CME Group, and Moody's.

Here is how it works:

- They called employees' personal phones, posing as the company's IT department.

- Real help desk numbers were sometimes displayed on the screen.

- They claimed passwords needed to be updated urgently.

- Employees were directed to a fake website named "passkeyhelpdesk".

- Once the password was entered, hackers requested SMS verification codes, and accounts were taken over before the call ended.

Google said some companies even paid ransoms.

These companies spend hundreds of millions of dollars annually on cybersecurity.