Threats to Asset and Wealth Management in 2020-2021

This intelligence blog outlines Q4 2020 activity targeting asset and wealth management firms, highlighting ransomware operators (Sodinokibi, NetWalker) publishing stolen corporate and client data on leak sites, an increase in business email compromise (BEC) and payroll/invoice fraud (including large-scale campaigns by the Cosmic Lynx group), and evolving TTPs such as spearphishing, voice phishing (including deepfake audio), and abuse of cloud email services; it concludes with prioritized mitigation strategies for ransomware, BEC awareness, and threat intelligence monitoring.