646
The hackers stole bank login credentials via phishing emails that appeared to come from the victims ' banks , then leveraged flaws in SS7 to redirect the SMS messages required to confirm funds transfers .
 ( phishing: appeared to come from,  the victims ' banks: victim, phishing emails: tool, leveraged flaws in SS7 to redirect the SMS messages: attack pattern, funds transfers: purpose) 
Locate the role in the text that participated in the event based on the event type and return it in the event list. 
 Option: Event type: phishing, data breach, ransom, discover vulnerability, patch vulnerability, Arguments type: vulnerable system, capabilities, vulnerability, number of victim, issues addressed, compromised data, damage amount, common vulnerabilities and exposures, victim, patch number, number of data, tool, discoverer, time, purpose, place, payment method, releaser, vulnerable system version, attacker, supported platform, patch, price, vulnerable system owner, trusted entity, attack pattern. 
Text: {0} 
Answer:
 ( phishing: appeared to come from,  the victims ' banks: victim, phishing emails: tool, leveraged flaws in SS7 to redirect the SMS messages: attack pattern, funds transfers: purpose) 