AI-cloned voices targeted Citadel, Point72 and other major hedge funds

Photo: NordWood Themes / Unsplash

Citadel, Point72, Two Sigma and Millennium Management were targeted by a coordinated wave of voice-cloning phishing attacks, attempts to trick employees into granting system access using AI-generated voices impersonating people they'd trust.

What happened

The attacks used cloned voices, a "vishing" (voice phishing) technique, to attempt social engineering against staff at some of the largest hedge funds in the industry. In response, FINRA activated its newly launched Financial Intelligence Fusion Center, a threat-intelligence coordination tool, for the first time in a real incident, helping affected firms share information about the attack pattern.

Why it's a different kind of AI story

Every AI story we've covered this year has been about brokers and platforms giving AI agents more access, on purpose, with review flows and approval gates. This is the inverse: AI used as an attack tool against the humans who already have legitimate access, a reminder that the same technology enabling agentic trading also lowers the cost of impersonation attacks aimed at the people running that infrastructure.

Why this matters if you use Cresori

Hedge funds aren't the audience Cresori serves, but the underlying lesson scales down: voice and video cloning are cheap enough now that "it sounded like someone I know" isn't a reliable trust signal anymore, for a fund's back-office staff or for anyone getting an unexpected call about account access. Verify through a second channel before acting on anything urgent involving your accounts.

Sources: Bloomberg, August 5, Fortune.