Silent Ransom Group Hits US Law Firms in Escalating Extortion Attacks
Silent ransomware group uses vishing, IT impersonation, and office intrusions to extort US law firms.
A financially motivated ransomware group, dubbed 'Silent,' is targeting US law firms with a multi-pronged extortion strategy. The group combines voice phishing (vishing), IT support impersonation, and even physical office intrusions to steal sensitive data. This stolen information is then used to extort victims, likely through threats of public disclosure or further disruption.
AI summary of the linked source. Not reviewed by an editor. How this works
Run vishing?
Get an email when a new story names vishing, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
The lesson from this incident
Full lessonThe Silent ransomware group's success stems from exploiting human vulnerabilities through sophisticated social engineering tactics including voice phishing, IT support impersonation, and physical office infiltration. Law firms are particularly attractive targets due to their access to highly sensitive client data and often inadequate cybersecurity postures relative to their data value. This multi-pronged approach bypasses traditional technical security controls by manipulating employees into providing access or information. The combination of social engineering with physical security breaches demonstrates how attackers adapt to exploit the weakest links in an organization's security chain.
What helps against this
How we list vendors- Phishing-resistant MFA
A stolen password, or a user who taps Approve on a push prompt, is no longer enough to log in.
- Email security
Phishing, malware and invoice fraud are filtered out before they reach inboxes.
- Security awareness training and phishing simulation
People recognise and report attacks instead of falling for them.