Ransomware hackers target dozens of major U.S. financial firms

Dozens of leading U.S. financial companies have fallen victim to ransomware attacks over the last month, with hackers employing sophisticated social engineering tactics. The attackers reportedly used phone calls to gain access to company systems, a method that has become increasingly prevalent.

According to reports, the cybercriminals created numerous fake websites, totaling 72, designed to steal login credentials from employees of financial firms and private investors. Among the targeted entities are prominent names such as Blackstone, Bridgewater Associates, Apollo Global Management, KKR, Bain Capital, CME, and Moody's.

Google, which identified some of the fake sites like Redact, Pink, Helix, and Falcon, noted that some victimized companies have resorted to paying ransoms to recover their data. The U.S. State Department has announced a reward of up to $10 million for information leading to the identification of individuals associated with hacker groups UNC5792 and UNC4221, believed to be behind large-scale phishing attacks targeting users of messaging apps like WhatsApp and Signal.

This wave of attacks highlights the persistent threat of ransomware and the evolving tactics used by cybercriminals to infiltrate sensitive financial networks. The involvement of major financial institutions underscores the significant risks to both corporate security and investor confidence.