Summary
A major vishing and extortion campaign, linked to the group BlackFile (now Redact), has targeted top US hedge funds and law firms, including Blackstone, KKR, and CME Group. The attackers impersonate IT staff to steal SaaS credentials and exfiltrate sensitive data, demanding ransoms, and have collected an estimated $10.7 million in cryptocurrency.