The FBI has alerted that the Silent Ransom Group (SRG) is conducting in-person data theft attacks on U.S. law firms. They employ social engineering tactics to gain remote access or physically infiltrate firms to steal sensitive data, which is then used for extortion.

• 01The Silent Ransom Group (SRG) targets U.S. law firms using social engineering to pose as IT support.
• 02SRG actors may physically visit firms to insert storage devices into computers for data theft.
• 03Indicators of an SRG attack include unauthorized individuals claiming to be IT support and unexpected device installations.
• 04The group has been active since at least 2022 and has focused on legal and financial organizations since early 2023.
• 05SRG uses stolen data to extort victims, threatening to leak information and contacting their clients to pressure for ransom.

Law firms and financial institutions in the U.S. are at risk of data theft and extortion, which could compromise sensitive client information.