Google alert: These incoming calls could compromise your phone—ignore them to stay safe and secure

Google says there’s a new phone scam by a dangerous hacker group called UNC6040. These hackers don’t hack your phone directly, they trick you into giving access by pretending to be someone trustworthy. This scam started months ago and is still happening, so you have to be careful now, as per reports.

It doesn’t matter if you have an Android or iPhone, both are at risk. The attack is called vishing, and it’s getting worse because people don’t take it seriously. UNC6040 calls employees pretending to be IT support, and asks them to install fake Salesforce apps like a fake “Data Loader”, as stated by the report by Forbes

Once the fake app is installed, they get into the system and steal sensitive data, then spread into other connected cloud services. They are targeting companies in industries like hospitality, retail, and education in the U.S. and Europe. These attackers are in it for money, and sometimes another group helps make money from stolen data months after the attack, as per Google Threat Intelligence Group.


Google found signs that UNC6040 might be linked to a cybercrime group called The Com. The Com is a group of hackers who hang out on Telegram and Discord, sharing tips and bragging about their crimes.

They use the same tricks, like pretending to be IT, stealing login info like Okta credentials, and mainly target English-speaking users at global companies. But Google says they’re not sure if UNC6040 and The Com are directly working together, they could just be using the same methods.

FBI joins the warning

The FBI has also warned about a separate but similar phone scam happening since April 2025. Scammers send texts and AI-generated voice messages, pretending to be important U.S. officials to steal personal data and online accounts.

The method includes smishing, vishing, and spear phishing that move the victim to another platform where malware or fake sites are sent. FBI accounts like FBI Cleveland and FBI Nashville, and New York State Police, posted this warning on X and other sites.

Google’s safety tips to stop attacks

1. Use least privilege, give people only the access they really need.

2. Strictly control access to connected apps.

3. Use IP-based restrictions.

4. Use Salesforce Shield to monitor for suspicious activity.

5. Always turn on multi-factor authentication (MFA) for all accounts.

6. Never answer unknown calls, especially if someone says they’re from your company’s IT support.

FAQs

Q1. What is vishing in phone scams?
Vishing is when scammers trick you through fake voice calls to steal your info.

Q2. Can iPhones also get hacked through these calls?
Yes, both Android and iPhone users can be targeted by these fake calls.