U.S. financial firms and businesses faced phone-based hacking attacks recently. Hackers used fake websites to steal employee passwords and gain access. These attacks targeted private equity, law firms, and financial ratings agencies. Sophisticated social engineering tactics were employed by the attackers. Many organisations remain vulnerable to these human-element cyber threats.