FBI warns law firms of in-person data theft by Silent Ransom Group

According to Bleeping Computer, the FBI has issued a warning regarding the silent Ransom Group (SRG), an extortion gang that is now employing in-person data theft tactics to target U.S.-based law firms.SRG actors initiate attacks by posing as IT support staff, contacting victims via phone calls or phishing emails to solicit a remote desktop session. If this fails, they resort to sending an actor to the victim's location to physically insert USB drives or external hard drives into computers for data exfiltration. The FBI identified unauthorized installation of external drives and individuals claiming to be IT support attempting to access computers as potential indicators of an SRG attack.The stolen data is then used for extortion, with threats to publish it online or pressure victims through calls to employees or clients. Also known as Luna Moth, this group has been active since at least 2022 and has specifically targeted legal and financial organizations in the U.S. since early 2023. SRG emerged after the Conti ransomware shutdown in March 2022, rebranding into smaller units focused on data theft and extortion.Bleeping Computer
Source: Ransomware
FBI warns law firms of in-person data theft by silent Ransom Group
An In-Depth Guide to Ransomware
Get essential knowledge and practical strategies to protect your organization from ransomware attacks.
Related
BTMOB Android RAT poses significant threat with easy-to-use builder
First identified in February 2025, BTMOB evolved from the SpySolr malware.
Mass database extortion causes significant damage despite low payment rates
The Ransomnews Research Team's five-year study, spanning from May 2021 to May 2026, analyzed over 65,000 exposed databases, finding that 46.3% contained ransom or wipe notes.
Formula 1 fans targeted by evolving scams, Bitdefender warns
Bitdefender's Fan Threat Index highlights four major threats targeting Formula 1 enthusiasts: counterfeit merchandise, fraudulent ticket sales, malicious streaming services, and sophisticated social engineering attacks.
Related Events
Get daily email updates
SC Media's daily must-read of the most current and pressing daily news
You can skip this ad in 5 seconds