Major Hedge Funds Targeted in Coordinated AI Voice Scam Cyber Attacks on Wall Street

Major Hedge Funds Face Coordinated Cyber Attacks

Several of Wall Street's largest hedge funds became targets of a coordinated wave of cyber attacks in recent days, putting the financial sector on high alert. Citadel, founded by billionaire Ken Griffin, Point72 Asset Management led by Steve Cohen, Millennium Management, and Two Sigma Investments—which manages $75 billion in assets—were all targeted by sophisticated audio phishing scams1

1

3

3

. These firms run complex risk systems containing confidential trading information and manage tens of billions of dollars, making them prime targets for cyber criminals seeking to exploit vulnerabilities in their software systems.

Two Sigma confirmed its security team responded quickly to the attempted vishing campaign and detected no impact to its data or systems4

4

. Point72 launched an investigation to determine whether their systems were breached, contacted law enforcement, and hired cyber security experts. The hedge fund emailed investors on Wednesday stating it did not believe any client information had been stolen1

1

. Citadel did not appear to be breached in the attack, though spokespeople for both Citadel and Point72 declined to provide further details4

4

.

AI-Powered Vishing Attacks Exploit Voice Cloning Technology

The attacks employed voice phishing, or vishing, a technique where perpetrators impersonated trusted colleagues through phone calls using AI-powered voice cloning technology2

2

. At one hedge fund, cyber criminals impersonated the firm's help desk and contacted employees attempting to gain login credentials for their authenticator apps, which serve as an additional layer of security beyond usernames and passwords1

1

. The attackers allegedly used technology capable of listening to phone calls and replicating a speaker's voice, tone, and phrasing to fabricate convincing fake calls4

4

.

George Gerchow, chief security officer at Bedrock Data and faculty at IANS Research, explained the severity of this AI-enabled cybercrime: "Unlike traditional phishing, AI-powered voice attacks are drastically harder to detect. By harvesting vast amounts of personal data from social media and the web, AI can accurately mimic a target's voice, interests, and behavior to craft convincing deepfakes"3

3

. It remains unclear who orchestrated the attacks or whether they were coordinated by a single group1

1

.

Financial Sector Cybersecurity Faces New Challenges

These incidents underscore the escalating cyber arms race as governments and companies race to respond to AI tools that have made it easier for cyber criminals and state-backed groups to hack targets1

1

. A cyberdefence group at Google published a report in June detailing a similar series of incidents at law firms and financial institutions, where attackers used phone calls to mimic IT employees1

1

. The world witnessed the potential damage of such attacks in 2024, when an employee at a Hong Kong branch of a multinational company was duped into wiring more than $25.5 million to scammers using AI-generated deepfakes of company employees, including its chief financial officer2

2

.

Wall Street groups have poured resources into strengthening their financial sector cybersecurity in recent years, as AI has heightened the possibility that even unsophisticated actors could successfully penetrate a company's network1

1

. Will Wilson, CEO of IT security firm Antithesis, warned that modern AI systems have "commoditized" hacking expertise that was once scarce. "The terrifying thing about modern-day AI systems is that they have commoditized this and made it possible to execute attacks at scale. Everybody will have to seriously level up. Otherwise they are going to be in big trouble"4

4

.

Regulatory Response and Industry Implications

The Financial Industry Regulatory Authority, or FINRA, launched its Financial Intelligence Fusion Center in March, providing members a channel to share fraud intelligence and coordinate responses to sophisticated threats4

4

. While a FINRA spokesperson declined to comment on the specific incident, they confirmed contact with affected firms. No confirmed data breaches, ransom demands, or financial losses have been publicly disclosed from this campaign4

4

.

The stakes remain extraordinarily high given that Wall Street firms process trillions of dollars in daily transactions, and AI allows easier access to cyberweapons against even the most sophisticated financial institutions4

4

. The lack of federal regulation combined with market pressures of the AI race have pushed tech developers to build increasingly capable models, including ones designed to imitate human speech with subtle nuances2

2

. Watch for increased investment in authentication technologies, employee training programs focused on identifying vishing attempts, and potential regulatory frameworks addressing AI-enabled system compromises as the financial industry grapples with this evolving threat landscape.