Major Hedge Funds Targeted in Sophisticated Cyberattacks

A significant wave of sophisticated cyberattacks has targeted information systems at major Wall Street money managers in recent days, according to individuals with knowledge of the matter. Point72 Asset Management notified its investors on Wednesday that it had experienced an attack, though initial assessments suggested no client information was compromised. The firm indicated it was still investigating the incident. The assault also aimed to infiltrate the information systems of other prominent hedge funds, including Millennium Management, Two Sigma Investments, and Citadel, as well as several private equity firms. These attacks utilized voice phishing, commonly known as vishing, a technique where cybercriminals employ technology to impersonate voices in phone calls or messages. The objective is to deceive employees into divulging sensitive information or granting unauthorized access. Two Sigma, which manages approximately $75 billion in assets, stated that it successfully thwarted the attempt to access its sensitive data. A spokesperson for Two Sigma confirmed that their security team responded swiftly to a vishing campaign targeting the firm and other investment managers, and there is currently no indication of any impact on their data or systems. The company continues to monitor the situation closely. Representatives for Millennium, Point72, and Citadel declined to comment on the specific incidents. Cybersecurity breaches affecting Wall Street have seen a marked increase over the past year. This surge is partly attributed to the growing accessibility and capability of artificial intelligence tools, which enable malicious actors to launch attacks more affordably and on a larger scale. Vinod Paul, president of Align Managed Services, a company specializing in cybersecurity and IT solutions for hedge funds, noted that attackers can now target approximately 1,000 entities with relative ease, compared to the roughly 50 entities they could previously target in a more focused attack. He further explained that hackers can now effectively mimic the voice, tone, and phrasing of individuals during phone calls, enhancing the believability of their phishing attempts. The sophistication of these attacks underscores the evolving threat landscape for financial institutions and the critical need for robust cybersecurity measures.