Wall Street's Social Engineering Nightmare: Apollo Breach Exposes the Limits of MFA

Apollo Global Management confirmed a breach of sensitive personal data including Social Security numbers, names, and addresses, marking the first formal disclosure in a broader wave of voice-phishing (vishing) attacks targeting the financial sector. Attackers impersonated IT support staff between July 6 and 10, successfully tricking employees into surrendering passwords and multi-factor authentication (MFA) codes—a classic social engineering play that bypasses traditional...