Ransomware Gang Takes In-Person Hacking to a New Level

Google and the FBI have sounded the alarm about a new tactic used by the Silent Ransom Group, a ransomware gang that has been targeting law firms with fake IT workers and in-person hacks.

A report published by Google's cybersecurity teams, Mandiant and Google Threat Intelligence Group, details the gang's use of physical, in-person access to steal victims' information. The report notes that the gang has been attempting to steal victims' data using USB drives or remote access tools, and has even gone so far as to publish the stolen data on its own leak site if the victim doesn't pay.

According to the FBI, the gang has been targeting law firms with social engineering and phishing attacks, pretending to be IT support employees. In some cases, the gang has sent fake IT support personnel to the victims' offices, where they have connected to employees' computers and used USB drives or remote access tools to steal data.

The FBI has confirmed that it has seen multiple instances of individuals impersonating IT support who have gained or attempted to gain physical in-person access to victim companies' offices and/or devices as part of Silent Ransom Group's scheme to exfiltrate data.

The gang's use of in-person hacking marks a significant escalation of attacks, and highlights the need for law firms to be vigilant about protecting their data. By using a combination of traditional hacking techniques and physical intrusions, the gang is able to bypass security controls and steal sensitive information.

• The gang's use of fake IT workers and in-person hacks is a new tactic that law firms need to be aware of.
• The gang has been targeting law firms with social engineering and phishing attacks, pretending to be IT support employees.
• The gang has sent fake IT support personnel to victims' offices, where they have connected to employees' computers and used USB drives or remote access tools to steal data.
• The gang has its own leak site, where it threatens victims with publishing their stolen data, and then publishes it if the victim doesn't pay.

The FBI has advised law firms to be cautious when dealing with IT support personnel, and to verify the identity of anyone who claims to be from IT before allowing them access to their systems.

"We can confirm we have seen multiple instances of individuals impersonating IT support who have gained or attempted to gain physical in-person access to victim companies' offices and/or devices as part of Silent Ransom Group's scheme to exfiltrate data," an FBI spokesperson said.

The use of in-person hacking is a novel and significant escalation of attacks, and highlights the need for law firms to be vigilant about protecting their data. By staying informed and taking steps to protect themselves, law firms can reduce the risk of falling victim to this type of attack.

• Stay informed about the latest threats and tactics used by ransomware gangs.
• Verify the identity of anyone who claims to be from IT before allowing them access to your systems.
• Use strong security controls to prevent hackers from bypassing your systems.
• Consider implementing additional security measures, such as two-factor authentication, to add an extra layer of protection.

By taking these steps, law firms can reduce the risk of falling victim to this type of attack and protect their sensitive information.