NEW YORK: Hackers seeking ransom have targeted dozens of major US financial institutions and businesses using a surprisingly simple tactic — posing as IT help desk employees and tricking staff into handing over passwords and authentication codes. According to Google and internet intelligence data reviewed by Reuters, the campaign targeted prominent private equity and financial firms, including Blackstone, Bridgewater Associates, Apollo Global Management, Bain Capital, KKR, TPG, CME Group, Clearlake Capital and Moody’s. Google said the cybercriminals operate under several names, including Redact, Pink, Falcon and Helix. The technology giant said some companies targeted during the campaign had paid ransoms, although it did not identify those businesses. Reuters was also unable to determine which companies were successfully compromised. The hackers reportedly created websites designed specifically for individual companies. Employees were then contacted by phone, sometimes through calls that appeared to originate from their organisation’s legitimate IT help desk. The attackers allegedly told employees that they needed to urgently update their passkeys or multifactor authentication credentials. Victims were then directed to malicious websites using names designed to look legitimate, such as those containing phrases like “passkey helpdesk” or “secure passkey”. Once an employee entered their credentials, the hackers could obtain an authentication code in real time, allowing them to take control of the account while remaining on the phone with the victim. Austin Larsen, a principal threat analyst with Google’s Threat Intelligence Group, said the technique was not especially sophisticated but remained highly effective. Cybersecurity experts said the campaign demonstrates that human behaviour remains one of the biggest vulnerabilities for even heavily protected organisations. Lee Clark of the Retail and Hospitality ISAC compared the tactic to persuading a security guard to open a heavily protected gate. Google said the attackers had increasingly focused on private equity firms, law firms and financial ratings agencies because they may hold sensitive information that companies would be willing to protect through ransom payments. Reuters identified 72 malicious websites listed in Google’s report and linked several of them to specific companies using internet intelligence platforms. Google cautioned that while the infrastructure indicated attempted intrusions, not every attack was necessarily successful. The campaign appears to have affected a broader range of industries. Data reviewed by Reuters showed that hackers created digital traps targeting more than 200 companies during a five-week period, including Uber, Zillow and Levi Strauss, along with law firms such as Paul Hastings and Greenberg Traurig. The hacking group’s shifting aliases have also complicated efforts to identify those behind the attacks. Google said the various names appeared connected through shared infrastructure, but acknowledged that important questions about the hackers’ identities and relationships remain unanswered. The latest campaign has heightened concern across Wall Street, highlighting how convincing phone calls and basic social engineering can bypass sophisticated cybersecurity systems and expose highly valuable corporate accounts.

BEIJING: China has developed a new generation of hypersonic weapons that could potentially threaten high-value military aircraft thousands of kilometres away, according to a Bloomberg report, highlighting the rapidly changing nature of long-range warfare and the growing strategic competition between Beijing and Washington. The reported development involves hypersonic glide vehicles (HGVs) capable of carrying air-to-air weapons. Such systems could potentially target aircraft that normally operate far behind the frontline, including aerial tankers, airborne command-and-control platforms and other support aircraft that provide fuel, communications and battlefield information to fighter jets. The report, citing a person with direct knowledge of the matter, said China has also added air-to-air capabilities to some hypersonic cruise missiles and anti-ship capabilities to several other missile systems. The reported changes reflect Beijing’s broader effort to make its large missile arsenal capable of carrying out a wider range of missions. A New Threat Beyond the Front Line The significance of the reported technology lies in the type of targets it could threaten. Modern air forces rely heavily on support aircraft. Tankers allow fighter jets to remain airborne for longer periods, while airborne early-warning and command aircraft help monitor enemy activity, coordinate operations and share information with aircraft and ground forces. If these platforms could be attacked from much greater distances, commanders could be forced to move them farther away from contested areas. That could reduce their effectiveness and complicate air operations. A hypersonic glide vehicle released from a DF-17 missile is reported to have a range of around 2,414 kilometres, a distance slightly shorter than the separation between mainland China and the US territory of Guam, a major American military hub in the western Pacific. China’s more advanced DF-27 is estimated to have a range of about 8,000 kilometres, potentially putting much of the western and central Pacific within reach. However, details about the system remain limited, and several of its reported capabilities are based on intelligence assessments rather than publicly released Chinese specifications. Why Hypersonic Weapons Are Difficult to Counter HGVs differ from conventional ballistic missile warheads because they can manoeuvre while travelling through the atmosphere. Their ability to alter their flight path can complicate efforts to predict where they will go and how they can be intercepted. China’s DF-17 has already been publicly displayed and is considered one of the world’s operational hypersonic glide weapon systems. Recent Chinese state media footage showed multiple DF-17 launch vehicles, suggesting the system has been deployed on a significant scale. But the reported ability to use such technology against distant aircraft also presents major operational challenges. A missile travelling thousands of kilometres would require highly accurate and continuously updated information about a moving target. Analysts note that the longer the flight, the greater the opportunity for an opponent to disrupt the intelligence and targeting chain. There is also a potential escalation risk. A ballistic missile launch could be difficult to identify immediately, creating uncertainty over whether the weapon is carrying a conventional or nuclear payload. Washington Responds With Longer-Range Weapons The development comes as the United States is also expanding its long-range air-to-air capabilities. The US Navy has begun testing the AIM-424 MALICE, a new long-range air-to-air missile reportedly designed to engage targets at distances exceeding 463 kilometres. Washington is also pursuing other extended-range weapons, including the AIM-260 and AIM-174B. The emerging competition reflects a broader shift in military planning. Future air battles may not be decided solely by which side has more fighter jets, but by which side can protect its own support aircraft while threatening those that keep an opponent’s air force operating. For China and the United States, that could make long-range missiles and hypersonic systems an increasingly important part of the military balance across the Indo-Pacific. Still, some details of China’s reported new capabilities remain classified or independently unverified. The claims therefore offer an indication of Beijing’s evolving military ambitions rather than a complete picture of its operational capabilities. Even so, the reported progress adds another layer to the increasingly sophisticated missile competition between the world’s two major military powers.