The FBI is warning US law firms about phishing attacks by the Silent Ransom Group, targeting sensitive data.
The group impersonates employees, gains access to systems, exfiltrates data using tools like WinSCP, and then threatens to leak the data unless a ransom is paid.
Silent Ransom Group, also known as Luna Moth, Chatty Spider, or UNC3753, has been active since 2022 and recently focused more on US law firms.
To defend against such attacks, the FBI recommends using strong passwords, 2FA, and robust backup solutions.