Overview
- In early August, reports identified attempted vishing attacks that targeted major hedge funds and private equity firms, with Two Sigma saying its security team thwarted an attempt and Point72 notifying investors it was targeted with no initial sign of client‑data loss.
- Google published a detailed analysis on Thursday that linked dozens of tailored phishing sites and multiple attacker aliases to a broader, ransom‑driven campaign against financial firms.
- Attackers called employees on personal phones while posing as IT help‑desk staff, sometimes spoofing real help‑desk numbers, and steered targets to fake login pages that captured passwords and live multi‑factor codes.
- Google researchers and Reuters reported the campaign sought payments typically between $750,000 and $3 million, that some unnamed victims paid ransoms, and that one associated cryptocurrency wallet received about $10 million.
- Industry and regulators have opened investigations and stepped up information sharing and defensive measures because security experts warn generative AI and voice‑cloning tools are lowering the cost and widening the scale of these social‑engineering attacks.