Top US hedge funds targeted by major vishing campaign Blackstone, KKR and
CME among those under fire

Date:
Fri, 07 Aug 2026 15:05:00 +0000

Description:
BlackFile (now known as Redact) has been busy, raking in more than $10 milllion since the start of the year.

FULL STORY ======================================================================Copy link Facebook X Whatsapp Reddit Pinterest Flipboard Threads Email Share this article 0 Join the conversation Follow us Add us as a preferred source on Google Newsletter Subscribe to our newsletter Googles Threat Intelligence
team links BlackFile (now Redact) to phishing and extortion attacks on major hedge funds and law firms Group impersonates IT staff by phone, steering victims to spoofed login pages to steal SaaS credentials and tokens, then exfiltrates sensitive data Targets include Blackstone, KKR, Apollo, CME
Group, and firms like Paul Hastings; Google tracked $10.7 million flowing
into 18 crypto wallets between JanuaryMay 2026 Some of the biggest US hedge funds and law firms have been targeted by a highly sophisticated data breach and extortion campaign, conducted by a group of criminals previously known as BlackFile, experts have warned.

BlackFile (or Redact, as the group is now calling itself) has a relatively simple modus operandi, also used by ShinyHunters - they call their targets on the phone (usually employees with access to SaaS systems), identify as IT staff, and direct victims to convincing, lookalike login pages designed to steal their credentials and authentication tokens. Once they gain access to victims' accounts, the attackers access enterprise SaaS environments (for example, Microsoft 365 and Okta) and use automated tools to exfiltrate sensitive data. In the last step, they notify the victims and threaten to
leak the data on the dark web unless a ransom is paid. Latest Videos From TechRadar Watch full video here: Stealing millions Since a part of the
process is to navigate the victims to spoofed login pages, the criminals
often register domain names that can easily be confused for legitimate ones.

That is also a good way to spot who the potential victims are, and according to a new report from Google s Threat Intelligence Group (TGIT) team, these
are some of the biggest names in the finance industry: Blackstone, KKR & Co, Apollo Global Management Inc, and CME Group Inc. You may like Experts warn of Silent Ransom Group breaking into businesses How scammers use "scraped New York Times content" to trick security scanners Google says Chinese hackers cracked Workspace security to hit high-value targets

Apart from these names, a few law firms were also spotted, including Paul Hastings LLP and Greenberg Traurig LLP. However, none of these confirmed having been breached, and Greenberg Traurig told Reuters they were never targeted in the first place.

The group seems to be making quite the progress. In April and May, they registered a new phishing domain every 2.2 days, rising to every 1.6 days for June and July. Its paying off, too. Are you a pro? Subscribe to our
newsletter Sign up to the TechRadar Pro newsletter to get all the top news, opinion, features and guidance your business needs to succeed! Contact me
with news and offers from other Future brands Receive email from us on behalf of our trusted partners or sponsors By submitting your information you agree to the Terms & Conditions and Privacy Policy and are aged 16 or over.

In the 18 cryptocurrency wallets Google associates with the group and tracks, around $10.7 million was received between January and mid-May 2026. The best antivirus for all budgets Our top picks, based on real-world testing and comparisons

Read our full guide to the best antivirus 1. Best overall: Bitdefender Total Security 2. Best for families: Norton 360 with LifeLock 3. Best for mobile: McAfee Mobile Security Follow TechRadar on Google News and add us as a preferred source to get our expert news, reviews, and opinion in your feeds.



======================================================================
Link to news story: https://www.techradar.com/pro/security/top-us-hedge-funds-targeted-by-major-vi shing-campaign-blackstone-kkr-and-cme-among-those-under-fire


--- Mystic BBS v1.12 A49 (Linux/64)
* Origin: tqwNet Technology News (1337:1/100)