< Back to situations

Get alerts on this situation

We’ll email you as it develops, and you can follow the whole thread from day one.

Unsubscribe anytime.

[SITUATION] · [ACTIVE]

2 clusters · 20 sources · 1 days · First seen 1 day ago · Last updated 1 day ago

Categories: TECHNOLOGY

AI voice‑phishing attacks on US hedge funds

Entities: Citadel · Scattered Spider · Point72 Asset Management · Two Sigma Investments · Google

Overview

In early August 2026, a coordinated wave of AI‑generated voice‑phishing (vishing) attacks targeted several of the largest U.S. hedge funds and private‑equity firms, including Point72 Asset Management, Citadel, Two Sigma Investments, Millennium Management and others. Hackers used synthetic voice clones to impersonate senior executives and IT staff, attempting to obtain login credentials and system access.

Point72 confirmed the intrusion attempt but reported no client data was taken; Two Sigma said its security team stopped the attack with no impact to its systems, and other firms declined comment. Security experts highlighted the scalability of AI tools, allowing threat actors to expand from dozens to thousands of targets.

Google’s Threat Intelligence Group later identified the attackers operating under names such as Redact, Pink, Falcon and Helix, noting a shift toward private‑equity firms, law firms and rating agencies. The White House convened a working group of AI developers and critical‑infrastructure operators to share threat intelligence and improve defenses against AI‑powered cyber threats.

Claims

What the coverage asserts, and how well corroborated each claim is across sources.

[● 8 SOURCES] Hackers used AI‑generated voice‑cloning (vishing) to target hedge funds and private‑equity firms. (All articles)
[● 8 SOURCES] Targeted firms include Point72 Asset Management, Two Sigma Investments, Citadel, Millennium Management, Blackstone, KKR and Bridgewater Associates. (All articles)
[● 7 SOURCES] AI tools enable attackers to scale from targeting about 50 entities to as many as 1,000 in a single operation. (All articles)
[● 5 SOURCES] Point72 and Two Sigma reported that no client data was stolen and that their security teams blocked the attacks. (All articles)
[● 5 SOURCES] The hackers operate under the names Redact, Pink, Falcon and Helix. (All articles)
[● 5 SOURCES] Google reported the campaign and said the attackers have shifted focus to private‑equity, law firms and rating agencies. (All articles)
[● 5 SOURCES] The attacks are part of a broader surge in AI‑powered cyberattacks on financial institutions worldwide. (All articles)
[● 4 SOURCES] The White House has convened a working group of AI developers and critical‑infrastructure operators to share threat intelligence and improve defenses against AI‑powered cyber threats. (All articles)

Timeline

1 day ago

[TECHNOLOGY] 18 sources
US Hedge Funds Targeted by AI Voice‑Phishing Attacks
AI‑driven voice‑phishing attacks targeted US hedge funds and private‑equity firms; firms report no data loss, while security teams blocked the attempts.
1 day ago

[TECHNOLOGY] 2 sources
Cyberattack Targets Major Wall Street Firms Including Point72 and Citadel
A coordinated cyber‑attack using phone‑phishing targeted major Wall Street firms such as Point72, Two Sigma and Citadel; no client data was reported stolen.

Sources

americanbazaaronline.com · cnbcindonesia.com · cryptopolitan.com · economymag.it · en.coin-turk.com · frankonfraud.com · kfgo.com · merca2.es · mix929.com · moneymarket.com · paparazzi.com.ar · scenarieconomici.it · sgsme.sg · srnnews.com · suarasarawak.my · theedadvocate.org · wkzo.com · wtvbam.com · wvfm1065.com · wxerfm.com

This summary has been updated 1 time: see revision history