[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fgJj5BoQCJJC_S0vhCPsJ_iISmoavzvkhOtS5mXQ6PeU":3},{"article":4,"iocs":46,"watch_terms":47,"solutions":48,"lesson":134},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":23,"category":24,"article_tags":28},"bfe21538-fc64-47b6-964c-f9a129f06c20","Silent Ransom Group Hits US Law Firms in Escalating Extortion Attacks","silent-ransom-group-hits-us-law-firms-in-escalating-extortion-attacks-ccbdf1","The financially motivated group is combining vishing, IT impersonation, and in-person office intrusions to steal data and extort victims.","A financially motivated ransomware group, dubbed 'Silent,' is targeting US law firms with a multi-pronged extortion strategy. The group combines voice phishing (vishing), IT support impersonation, and even physical office intrusions to steal sensitive data. This stolen information is then used to extort victims, likely through threats of public disclosure or further disruption.","Silent ransomware group uses vishing, IT impersonation, and office intrusions to extort US law firms.","https:\u002F\u002Fwww.darkreading.com\u002Fcyberattacks-data-breaches\u002Fsilent-ransom-us-law-firms-extortion-attacks","https:\u002F\u002Feu-images.contentstack.com\u002Fv3\u002Fassets\u002Fblt6d90778a997de1cd\u002Fblt559ee8a9968e803d\u002F6a271ee7c15726d93fd4c2b9\u002Fextortion_Koldunov_shutterstock.jpg?width=1280&auto=webp&quality=80&disable=upscale","2026-06-08T20:59:52+00:00","2026-06-08T22:00:19.69312+00:00",8,[17,20],{"name":18,"type":19},"Silent","threat_actor",{"name":21,"type":22},"vishing","product","7d8b5ab8-ea0b-4ced-ae97-ec251b86993a",{"id":23,"icon":25,"name":26,"slug":27},null,"Ransomware","ransomware",[29,34,36,41],{"category":30},{"id":31,"icon":25,"name":32,"slug":33},"2e06f76c-d5b9-4f54-9eef-4d3447b10730","Breaches","breaches",{"category":35},{"id":23,"icon":25,"name":26,"slug":27},{"category":37},{"id":38,"icon":25,"name":39,"slug":40},"c5eccf7c-abbc-4bd3-bbed-e6da5cba8e73","Incident Response","incident-response",{"category":42},{"id":43,"icon":25,"name":44,"slug":45},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[],[21],{"controls":49,"vendors":133},[50,79,108],{"slug":51,"name":52,"problem":53,"products":54},"phishing-resistant-mfa","Phishing-resistant MFA","A stolen password, or a user who taps Approve on a push prompt, is no longer enough to log in.",[55,63,71],{"vendor_slug":56,"vendor_name":57,"vendor_logo":58,"product_slug":59,"product_name":60,"url":61,"description":62},"yubico","Yubico","\u002Fvendor-logos\u002Fyubico.png","yubikey","YubiKey","https:\u002F\u002Fwww.yubico.com\u002Fproducts\u002F","Hardware security keys for FIDO2, passkeys and smart card login, in USB and NFC versions.",{"vendor_slug":64,"vendor_name":65,"vendor_logo":66,"product_slug":67,"product_name":68,"url":69,"description":70},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","entra-id","Microsoft Entra ID","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fidentity-access\u002Fmicrosoft-entra-id","Cloud identity and access management with single sign-on, conditional access, passkeys and identity governance.",{"vendor_slug":72,"vendor_name":73,"vendor_logo":74,"product_slug":75,"product_name":76,"url":77,"description":78},"okta","Okta","\u002Fvendor-logos\u002Fokta.png","workforce-identity","Okta Workforce Identity","https:\u002F\u002Fwww.okta.com\u002Fproducts\u002Fworkforce-identity\u002F","Single sign-on, adaptive MFA including phishing-resistant methods, and lifecycle management for employees.",{"slug":80,"name":81,"problem":82,"products":83},"email-security","Email security","Phishing, malware and invoice fraud are filtered out before they reach inboxes.",[84,92,100],{"vendor_slug":85,"vendor_name":86,"vendor_logo":87,"product_slug":88,"product_name":89,"url":90,"description":91},"proofpoint","Proofpoint","\u002Fvendor-logos\u002Fproofpoint.png","core-email-protection","Proofpoint Core Email Protection","https:\u002F\u002Fwww.proofpoint.com\u002Fus\u002Fproducts\u002Femail-protection","Email filtering for phishing, malware and business email compromise.",{"vendor_slug":93,"vendor_name":94,"vendor_logo":95,"product_slug":96,"product_name":97,"url":98,"description":99},"abnormal","Abnormal AI","\u002Fvendor-logos\u002Fabnormal.png","abnormal-email-security","Abnormal Inbound Email Security","https:\u002F\u002Fabnormal.ai\u002F","API-based email security for Microsoft 365 and Google Workspace using behavioural models.",{"vendor_slug":101,"vendor_name":102,"vendor_logo":103,"product_slug":104,"product_name":105,"url":106,"description":107},"cloudflare","Cloudflare","\u002Fvendor-logos\u002Fcloudflare.png","cloudflare-email-security","Cloudflare Email Security","https:\u002F\u002Fwww.cloudflare.com\u002Fsase\u002Fproducts\u002Femail-security\u002F","Email filtering for phishing and business email compromise.",{"slug":109,"name":110,"problem":111,"products":112},"security-awareness-training","Security awareness training and phishing simulation","People recognise and report attacks instead of falling for them.",[113,120,127],{"vendor_slug":114,"vendor_name":115,"vendor_logo":116,"product_slug":114,"product_name":117,"url":118,"description":119},"sosafe","SoSafe","\u002Fvendor-logos\u002Fsosafe.png","SoSafe Awareness Platform","https:\u002F\u002Fsosafe-awareness.com\u002F","Behaviour-based awareness training and phishing simulation in many languages.",{"vendor_slug":121,"vendor_name":122,"vendor_logo":123,"product_slug":109,"product_name":124,"url":125,"description":126},"knowbe4","KnowBe4","\u002Fvendor-logos\u002Fknowbe4.png","KnowBe4 Security Awareness Training","https:\u002F\u002Fwww.knowbe4.com\u002Fproducts\u002Fsecurity-awareness-training","Training library and simulated phishing with reporting.",{"vendor_slug":128,"vendor_name":129,"vendor_logo":130,"product_slug":128,"product_name":129,"url":131,"description":132},"hoxhunt","Hoxhunt","\u002Fvendor-logos\u002Fhoxhunt.png","https:\u002F\u002Fhoxhunt.com\u002F","Adaptive phishing simulations and micro-training, with a focus on reporting.",[],{"slug":135,"title":136,"body":137,"framework_refs":138,"framework_notes":145},"multi-vector-social-engineering-attacks-target-law-firms","Multi-Vector Social Engineering Attacks Target Law Firms","The Silent ransomware group's success stems from exploiting human vulnerabilities through sophisticated social engineering tactics including voice phishing, IT support impersonation, and physical office infiltration. Law firms are particularly attractive targets due to their access to highly sensitive client data and often inadequate cybersecurity postures relative to their data value. This multi-pronged approach bypasses traditional technical security controls by manipulating employees into providing access or information. The combination of social engineering with physical security breaches demonstrates how attackers adapt to exploit the weakest links in an organization's security chain.",[139,140,141,142,143,144],"CIS Control 14","NIST AC-2","NIST AC-6","NIST PE-2","NIST PE-3","GDPR Article 32",{}]