[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fiJptD-QD33y4DXrCuynwHlW5o-OtUFUVtJ_eVkqwAug":3},{"lesson":4},{"id":5,"slug":6,"article_id":7,"title":8,"body":9,"prevention":10,"framework_refs":11,"framework_notes":19,"status":20,"created_at":21,"published_at":22,"article":23,"tags":27,"podcasts":40,"controls":47},"30add5d1-e1cf-455c-8bcb-b50ccce40416","law-firms-targeted-by-hybrid-social-engineering-and-physical-access-attacks","8f0f6232-4f52-43fa-ad94-b86e8506c753","Law Firms Targeted by Hybrid Social Engineering and Physical Access Attacks","Silent Ransom Group demonstrates how cybercriminals are evolving beyond traditional remote attacks by combining social engineering with physical presence to steal sensitive data. The group impersonates IT support personnel to gain both remote and in-person access to law firm workstations, exploiting trust and inadequate verification procedures. This hybrid approach is particularly dangerous for law firms handling confidential client data, as it bypasses many traditional cybersecurity defenses that focus solely on network perimeter protection. The success of over 100 attacks highlights critical gaps in employee training and physical security protocols.","**Immediate actions:**\n- Implement mandatory identity verification procedures for all IT support requests, both remote and in-person\n- Establish a centralized IT help desk protocol that employees must follow before granting system access\n- Deploy endpoint detection and response (EDR) solutions on all workstations to monitor for unauthorized access\n\n**Long-term improvements:**\n- Conduct regular security awareness training focused on social engineering tactics and impersonation schemes\n- Implement multi-factor authentication for all system access and require manager approval for IT support activities\n- Establish physical security controls including visitor management systems and employee escort requirements\n\n**Detection measures:**\n- Monitor for unusual file access patterns or data transfers during supposed IT maintenance windows\n- Implement user behavior analytics to detect anomalous workstation activity",[12,13,14,15,16,17,18],"CIS Control 14","NIST AC-2","NIST AC-3","NIST AT-2","NIST PE-2","NIST PE-3","ISO 27001 A.11.2.6",{},"published","2026-05-27T22:20:17.917882+00:00","2026-05-27T22:20:17.757+00:00",{"id":7,"url":24,"slug":25,"title":26},"https:\u002F\u002Fcyberscoop.com\u002Ffbi-warning-silent-ransom-group-law-firms\u002F","fbi-warns-us-based-law-firms-to-be-on-the-lookout-for-cybercrime-group-that-stea-9b1b14","FBI warns US-based law firms to be on the lookout for cybercrime group that steals data in person",[28,34],{"id":29,"name":30,"slug":31,"description":32,"color":33},"1ec88fde-2d0f-4ed8-932a-33f5ccc0fdc7","Access Control","access-control","Excessive privileges, missing MFA, weak auth","#f97316",{"id":35,"name":36,"slug":37,"description":38,"color":39},"7261eb8f-acd4-4d93-a489-7fdd652ec0ea","Security Awareness","security-awareness","Phishing, social engineering, human error","#22c55e",[41],{"id":42,"date":43,"edition":44,"title":45,"audio_url":46},"c37b305d-db28-4cd3-b7f9-e2a1e690b1b2","2026-05-28","morning","ThreatNoir Morning Brief — May 28","https:\u002F\u002Fcdn.threatnoir.com\u002Fpodcasts\u002F2026-05-28\u002Fthreatnoir-morning-brief-2026-05-28.mp3",[48,52,56],{"slug":49,"name":50,"problem":51},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",{"slug":53,"name":54,"problem":55},"data-loss-prevention","Data loss prevention (DLP)","Sensitive data cannot quietly leave by email, upload, USB stick or AI tool.",{"slug":57,"name":58,"problem":59},"security-awareness-training","Security awareness training and phishing simulation","People recognise and report attacks instead of falling for them."]