Wall Street Firms Targeted by AI-Powered Voice Cloning Cyberattacks, Bloomberg Reports

A wave of sophisticated cyberattacks using artificial intelligence to clone the voices of executives has targeted several of Wall Street's most prominent financial firms, according to a report from Bloomberg. The targets reportedly included major hedge funds and private equity firms, highlighting a significant new threat to the sector's security.

The Nature of the Attack

The attacks centered on a technique known as voice phishing, or 'vishing.' Citing people familiar with the matter, Bloomberg reported that hackers used AI-powered sound technology to precisely mimic the voices, tones, and speech patterns of senior executives.

The goal of these highly convincing impersonations was to deceive employees over the phone or in audio messages. By posing as trusted figures, the attackers sought to manipulate staff into divulging sensitive credentials or granting access to secure internal systems.

Firms Respond to Threats

Bloomberg's sources identified several high-profile asset managers as targets in the campaign, including:

• Two Sigma Investments
• Citadel
• Point72 Asset Management

Ad

Two Sigma, a $75 billion asset manager, confirmed it successfully defended against a vishing attempt. A spokesperson for the firm stated that its security team responded quickly to the campaign and that there is "no indication of any impact to our data or our systems."

Representatives for both Citadel and Point72 declined to comment on the matter, according to the report.

Broader Implications for Financial Security

This incident underscores the escalating cybersecurity risks facing the financial industry as generative AI tools become more accessible and powerful. The ability to convincingly clone voices creates a potent new avenue for social engineering attacks that can bypass traditional security measures that rely on human verification.

The assault is part of a broader increase in cyber threats directed at professional services firms over the past year. It serves as a critical warning for institutions to bolster their security protocols and employee training to defend against AI-enabled fraud.