Hackers Target US Private Equity Firms, Including Blackstone and CME
We independently review everything we recommend. When you buy through our links, we may earn a commission which is paid directly to our Australia-based writers, editors, and support staff. Thank you for your support!
Concise Overview
- Cybercriminals are targeting major financial institutions in the US using basic techniques.
- Private equity firms such as Blackstone and CME are key targets.
- Hackers employ social engineering through phone interactions to obtain information.
- Google has detected several hacker groups participating.
- Recently, more than 200 businesses have been subjected to attacks.
Classic Methods, Fresh Targets
Recent incidents of cyber intrusion have exposed a worrying flaw in esteemed US financial organizations, as hackers resort to unexpectedly simple approaches to infiltrate advanced security frameworks. Prominent private equity firms like Blackstone, Bridgewater Associates, and CME Group find themselves under threat. Even with robust security protocols, it’s evident that human errors continue to be a notable vulnerability.
Hackers Redirect Focus
Google’s Threat Intelligence Group has noted a redirection in hackers’ attention towards private equity firms, legal practices, and financial rating agencies. The primary motivation appears to be monetary, as hackers utilize sensitive information for extortion. They implement social engineering techniques, including phone calls disguised as IT support, to trick staff into revealing essential data.
Social Engineering in Action
Hackers have demonstrated proficiency in employing careful social engineering techniques. They contact employees through personal mobile devices, pretending to be from the company’s help desk. By guiding them to counterfeit websites, they successfully collect passwords and access codes. Although this approach lacks technological sophistication, it has proven to be remarkably effective.
Changing Identities and Shared Resources
The hacker factions, operating under various names such as Redact and Helix, seem to utilize similar infrastructure, though their precise identities and connections remain ambiguous. This has sparked widespread concern across Wall Street, with numerous hedge funds and firms admitting attempts to infiltrate their networks.
Conclusion
The recent surge of cyberattacks against significant US financial institutions emphasizes a crucial weakness in dependence on advanced tech solutions alone. These events illustrate that traditional tactics like social engineering can still penetrate the most fortified systems, underscoring the necessity for robust security measures that encompass both technological and human elements.
.jpg)
