Hackers Built Fake Websites and Called Staff at Top Investment Firms to Steal Passwords

Google researchers warned that hackers built 72 fake login websites and phoned employees at Blackstone, Apollo, KKR, Bain Capital, and Bridgewater. The callers tricked staff into entering passwords and security codes. Some attacks brought ransoms up to $750,000. Apollo confirmed its cloud systems were breached July 6–10, 2026.