Key Takeaways
- • A coordinated wave of AI-powered voice phishing ("vishing") cyberattacks targeted major Wall Street asset managers including Two Sigma Investments ($75 billion AUM), Citadel, and Point72 Asset Management, as well as private equity firms, according to Bloomberg reporting.
- • Attackers employed AI voice-cloning technology to impersonate legitimate executives and colleagues in phone calls and audio messages, attempting to manipulate employees into disclosing sensitive information or granting network access.
- • Two Sigma Investments confirmed it successfully thwarted the breach attempt with no indication of data or system compromise, though Citadel and Point72 declined to comment on whether their systems were targeted.
- • The attack campaign reflects a broader surge in cyber threats targeting professional services firms over the past year, with hackers continuously adopting new technologies to shift tactics and evade defenses.
Summary
Wall Street's premier asset management and private equity firms faced a sophisticated breach attempt this week, as cybercriminals deployed AI-enabled voice phishing tactics to infiltrate some of the financial industry's most heavily fortified institutions. According to Bloomberg, the coordinated campaign targeted Two Sigma Investments, Citadel, Point72 Asset Management, and several private equity firms, marking an escalation in the use of artificial intelligence-powered fraud against institutional financial actors.
The core attack methodology centered on voice cloning and impersonation. Hackers utilized advanced AI and sound technology to replicate the exact voices, tones, and phrasing of legitimate executives and colleagues, then deployed these synthetic audio in phone calls and recorded messages to manipulate employees into surrendering credentials, sensitive data, or network access credentials. This "vishing" technique—voice phishing—represents a significant evolution in social engineering attacks, as it eliminates traditional tells that might expose fraudulent calls to trained security personnel.
Two Sigma Investments, which manages $75 billion in assets, moved quickly to neutralize the threat. The firm's security team detected and responded rapidly to the vishing campaign and confirmed through a spokesperson that there was "no indication of any impact to our data or our systems." However, Citadel and Point72 declined to provide commentary on whether their platforms were targeted or whether any breaches occurred, limiting visibility into the full scope of the attack's success or impact across the sector.
The incident underscores accelerating cyber risk within institutional finance. Security leaders across Wall Street have acknowledged that cybercriminals continually shift tactics and adopt emerging technologies—particularly AI—to outpace defensive capabilities. This wave of attacks arrives amid broader concerns about AI-related threats to financial markets, as institutional investors and asset managers grapple with integrating artificial intelligence tools while managing heightened exposure to AI-enabled fraud and system compromise.
The core attack methodology centered on voice cloning and impersonation. Hackers utilized advanced AI and sound technology to replicate the exact voices, tones, and phrasing of legitimate executives and colleagues, then deployed these synthetic audio in phone calls and recorded messages to manipulate employees into surrendering credentials, sensitive data, or network access credentials. This "vishing" technique—voice phishing—represents a significant evolution in social engineering attacks, as it eliminates traditional tells that might expose fraudulent calls to trained security personnel.
Two Sigma Investments, which manages $75 billion in assets, moved quickly to neutralize the threat. The firm's security team detected and responded rapidly to the vishing campaign and confirmed through a spokesperson that there was "no indication of any impact to our data or our systems." However, Citadel and Point72 declined to provide commentary on whether their platforms were targeted or whether any breaches occurred, limiting visibility into the full scope of the attack's success or impact across the sector.
The incident underscores accelerating cyber risk within institutional finance. Security leaders across Wall Street have acknowledged that cybercriminals continually shift tactics and adopt emerging technologies—particularly AI—to outpace defensive capabilities. This wave of attacks arrives amid broader concerns about AI-related threats to financial markets, as institutional investors and asset managers grapple with integrating artificial intelligence tools while managing heightened exposure to AI-enabled fraud and system compromise.
Go deeper than the headline
Research every firm in this story, track the ones that matter and get the daily briefing — free for 7 days.