Silent Ransom Group targets law firms with fake IT support calls
The Silent Ransom Group is targeting U.S. law firms and professional services with fake IT support calls, exploiting social engineering tactics to steal sensitive data within hours of contact, per Mandiant's report.
This highlights the critical need for employee training against social engineering and implementing robust multi-factor authentication to prevent unauthorized access. Law firms should also monitor for unusual access patterns to detect breaches early.
The Silent Ransom Group (SRG) is leveraging fake IT support calls as part of sophisticated social engineering campaigns to infiltrate law firms and professional services. Mandiant reports these attacks often lead to rapid data theft within hours of initial contact.
SRG's tactics involve impersonating internal IT personnel to gain trust and extract credentials or access to sensitive systems. Once inside, attackers move quickly to exfiltrate client data, legal documents, and other critical information.
Organizations in the legal sector are advised to enhance employee awareness, implement stringent access controls, and deploy behavioral analytics tools to detect anomalies in user activity that may signal an ongoing attack.