Major Wall Street financial firms and money managers have been targeted in a series of sophisticated cyberattack attempts in recent days, with hackers using phone calls to trick employees into handing over sensitive information, according to people familiar with the matter.
Some of the world’s largest hedge funds and several private equity firms were among those targeted, two people familiar with the matter said, speaking on condition of anonymity because the issue remains confidential.
Among the firms targeted was Point72 Asset Management, which told investors on Wednesday that it had been attacked. The firm indicated that no customer information was stolen during the incident, according to one of the sources.
Hackers also attempted to breach the information systems of hedge funds including Two Sigma Investments and Citadel, the sources said. Two Sigma did not immediately respond to a request for comment, while Citadel and Point72 declined to comment.
The attacks relied on a familiar tactic in which cybercriminals make phone calls and attempt to manipulate employees into providing access or disclosing other sensitive information.
Cybersecurity experts said attempts to penetrate major financial institutions are routine, but phone-based social engineering remains widely used because of its effectiveness.
The tactic has previously been associated with cybercriminal groups such as Scattered Spider, a loose-knit group of young hackers that has targeted a wide range of major corporations in recent years.
The latest incidents come as companies around the world face a growing wave of AI-powered cyberattacks and ransomware campaigns, which can disrupt operations and result in the theft of sensitive data.
Earlier this year, the White House announced a working group bringing together AI developers and operators of critical infrastructure to share threat intelligence and co-ordinate cyber defences as cyber threats continue to evolve.
Reuters
