Silent Ransom Hackers Target Law Firms via Fake IT Support

The cybercriminal group Silent Ransom has launched a campaign targeting law firms and professional services organizations in the US. The primary method involves social engineering, specifically calls posing as technical support staff.

According to a report by Mandiant, attackers rapidly adapt and exploit employee trust to gain access to corporate systems. In several cases, data was stolen within hours of the first contact, making such attacks particularly dangerous for companies handling sensitive information.

Experts note that the group is actively evolving its tactics, including the use of fake accounts and phishing scenarios. Law firms managing confidential client data are becoming a priority target for these attacks.

To mitigate such threats, it is recommended to enhance control over incoming calls, conduct regular cybersecurity training for employees, and implement multi-factor authentication.