Hackers Target US Private Equity Firms, Including Blackstone and CME
We independently review everything we recommend. When you buy through our links, we may earn a commission which is paid directly to our Australia-based writers, editors, and support staff. Thank you for your support!
Concise Overview
- Cybercriminals are targeting major financial institutions in the US using basic techniques.
- Private equity firms such as Blackstone and CME are key targets.
- Hackers employ social engineering through phone interactions to obtain information.
- Google has detected several hacker groups participating.
- Recently, more than 200 businesses have been subjected to attacks.
Classic Methods, Fresh Targets
Recent incidents of cyber intrusion have exposed a worrying flaw in esteemed US financial organizations, as hackers resort to unexpectedly simple approaches to infiltrate advanced security frameworks. Prominent private equity firms like Blackstone, Bridgewater Associates, and CME Group find themselves under threat. Even with robust security protocols, it’s evident that human errors continue to be a notable vulnerability.
Hackers Redirect Focus
Google’s Threat Intelligence Group has noted a redirection in hackers’ attention towards private equity firms, legal practices, and financial rating agencies. The primary motivation appears to be monetary, as hackers utilize sensitive information for extortion. They implement social engineering techniques, including phone calls disguised as IT support, to trick staff into revealing essential data.
Social Engineering in Action
Hackers have demonstrated proficiency in employing careful social engineering techniques. They contact employees through personal mobile devices, pretending to be from the company’s help desk. By guiding them to counterfeit websites, they successfully collect passwords and access codes. Although this approach lacks technological sophistication, it has proven to be remarkably effective.
Changing Identities and Shared Resources
The hacker factions, operating under various names such as Redact and Helix, seem to utilize similar infrastructure, though their precise identities and connections remain ambiguous. This has sparked widespread concern across Wall Street, with numerous hedge funds and firms admitting attempts to infiltrate their networks.
Conclusion
The recent surge of cyberattacks against significant US financial institutions emphasizes a crucial weakness in dependence on advanced tech solutions alone. These events illustrate that traditional tactics like social engineering can still penetrate the most fortified systems, underscoring the necessity for robust security measures that encompass both technological and human elements.
Reader questions
Frequently asked questions
Fast answers to the questions readers ask most about Hackers Target US Private Equity Firms, Including Blackstone and CME.
What primary strategy do these hackers employ?
The hackers chiefly utilize social engineering strategies, impersonating IT support to trick employees into sharing sensitive information.
Which sectors are being targeted by the hackers?
The hackers have redirected their efforts towards private equity firms, law firms, and financial rating agencies.
What drives the hackers to target these organizations?
The main motive is financial gain, as hackers perceive these firms as possessing valuable sensitive data that is worth protecting for a price.
In what way do the hackers obtain employee credentials?
The hackers lead employees to fraudulent websites to capture passwords and access codes, typically during phone interactions posing as help desk personnel.
Are these methods considered sophisticated?
Although they are effective, these methods are not deemed technologically sophisticated; they take advantage of basic human trust and errors.
How many companies have been targeted by these attacks lately?
More than 200 companies have faced targeting in the last five weeks.
