A report says hackers have launched an extortion scheme that includes creating fake websites designed to steal login credentials from employees at major financial firms. The scheme reportedly targets personnel across a range of private equity and investment organizations and other market-related companies. Listed targets include Blackstone, Bridgewater Associates, Apollo Global Management, Bain Capital, KKR and TPG. The report also names CME Group and Moody’s among the companies allegedly affected by the credential-theft effort. According to the data cited in the report, the attackers deploy websites intended to capture passwords, which can then be used to gain unauthorized access and support extortion demands. The report does not provide confirmed details on whether all named firms suffered successful intrusions, but it characterizes the activity as part of a coordinated extortion plot. The findings highlight risks faced by employees who may be directed to counterfeit pages that mimic legitimate sign-in portals. The report urges attention to cybersecurity practices such as credential protection and verification of website authenticity.