US Hedge Funds Targeted by AI Voice‑Phishing Attacks
Hackers have launched a wave of AI‑assisted voice‑phishing (vishing) attacks against major Wall Street hedge funds and private‑equity firms. Using artificial‑intelligence tools to clone executives’ voices, the attackers called employees of Point72 Asset Management, Two Sigma Investments, Citadel, Millennium Management and others, trying to obtain passwords and system access. The campaign also targeted private‑equity firms such as Blackstone, KKR and Bridgewater Associates.
The firms say no client data has been stolen and that their security teams blocked the intrusions. Two Sigma confirmed that its security team responded quickly and found no impact on data or systems. Point72 similarly reported that no customer information was taken. Security experts note that AI lowers the cost of attacks, allowing criminals to scale from targeting about 50 entities to as many as 1,000 in a single operation.
Google’s Threat Intelligence Group identified the attackers operating under names including Redact, Pink, Falcon and Helix, and said the group has shifted focus to private‑equity, law firms and rating agencies. The White House has convened a working group of AI developers and critical‑infrastructure operators to share threat intelligence and improve defenses against such AI‑powered cyber threats.
Entities: Align Managed Services · Blackstone · Citadel · Citadel LLC · Google · Millennium Management · Point72 Asset Management · Scattered Spider · Two Sigma Investments
Claims
What the coverage asserts, and how well corroborated each claim is across sources.
- [● 5 SOURCES] Point72 and Two Sigma reported that no client data was stolen and that their security teams blocked the attacks. (All articles)
- [● 7 SOURCES] AI tools enable attackers to scale from targeting about 50 entities to as many as 1,000 in a single operation. (All articles)
- [● 4 SOURCES] The White House has convened a working group of AI developers and critical‑infrastructure operators to share threat intelligence and improve defenses against AI‑powered cyber threats. (All articles)
- [● 5 SOURCES] The hackers operate under the names Redact, Pink, Falcon and Helix. (All articles)
- [● 5 SOURCES] Google reported the campaign and said the attackers have shifted focus to private‑equity, law firms and rating agencies. (All articles)
- [● 8 SOURCES] Targeted firms include Point72 Asset Management, Two Sigma Investments, Citadel, Millennium Management, Blackstone, KKR and Bridgewater Associates. (All articles)
- [● 8 SOURCES] Hackers used AI‑generated voice‑cloning (vishing) to target hedge funds and private‑equity firms. (All articles)
- [● 5 SOURCES] The attacks are part of a broader surge in AI‑powered cyberattacks on financial institutions worldwide. (All articles)