Morgan Stanley Wealth Management, the wealth and asset management division of Morgan Stanley, recently disclosed that a portion of its customers’ accounts were compromised via social engineering attacks. Morgan Stanley is a multinational investment bank and financial services company headquartered in the United States and serves governments, corporations, institutions, and individuals. The social engineering attacks consisted of vishing (otherwise known as voice phishing) that targeted Morgan Stanley customers for banking and login credentials. In Morgan Stanley’s breach notification letter to affected individuals, the company stated that the attack occurred “on or around February 11, 2022” and that the actor “was able to obtain information relating to [the victim’s] Morgan Stanley Online account, subsequently access this account and initiating unauthorized Zelle payments”. Zelle is an online payments platform that allows easy digital transfers between bank accounts. The letter also detailed that the following information was potentially exposed during the attacks: name, address, and account number(s) as well as the victim’s trusted contact(s) name, address, and phone number. CTIX analysts will continue to monitor social engineering attacks targeting the financial sector.