FBI warns of in-person data theft attacks from extortion gang
FBI warns Silent Ransom Group targets US law firms with in-person data theft and phishing attacks.
The FBI issued a flash alert warning that the Silent Ransom Group (SRG), also known as Luna Moth, Chatty Spider, and UNC3753, is conducting in-person data theft attacks against U.S. law firms. The threat actors use social engineering to pose as IT support staff, either remotely accessing systems via phishing and phone calls or physically visiting victim locations to insert USB drives and external hard drives. SRG then extorts victims by threatening to sell or publish stolen data unless ransom is paid.
AI summary of the linked source. Not reviewed by an editor. How this works
The lesson from this incident
Full lessonThe Silent Ransom Group demonstrates how attackers combine social engineering with physical access to bypass traditional security controls. By impersonating IT support staff, they exploit human trust to gain remote access through phishing calls or physical entry to insert malicious devices. This hybrid approach highlights that even organizations with robust technical defenses remain vulnerable when employees lack proper verification procedures for IT personnel. The subsequent data extortion shows how initial access can quickly escalate to significant business impact without proper detection and response capabilities.
What helps against this
How we list vendors- Phishing-resistant MFA
A stolen password, or a user who taps Approve on a push prompt, is no longer enough to log in.
- Email security
Phishing, malware and invoice fraud are filtered out before they reach inboxes.
- Security awareness training and phishing simulation
People recognise and report attacks instead of falling for them.
Indicators of Compromise
Extracted by AI from the linked source. Not reviewed by an editor. How this works
- malware — Silent Ransom Group (SRG)
- malware — Luna Moth
- malware — Chatty Spider
- malware — UNC3753