Details emerge on BlackFile’s recent attacks on financial companies

BlackFile (tracked as UNC6671) is an active cybercrime extortion group conducting voice-phishing and social-engineering campaigns against large financial firms, law firms, rating agencies and other sectors. The group operates multiple extortion brands (Redact, Pink, Helix, Falcon) using hundreds of callers to obtain initial access, issues multi-million-dollar demands typically negotiated below $1M, averages roughly 1.5 new victims per day, and has been linked to escalation tactics including swatting.