Law firms are increasingly becoming targets for cybercriminals, particularly through a technique known as voice phishing, or ‘vishing’. The cyber threat actor known as the Silent Ransom Group (SRG) has been identified as focusing its efforts on these legal entities. The Federal Bureau of Investigation (FBI) recently announced this escalation, emphasizing the seriousness of the threat to the legal sector.
These vishing attacks are performed by cybercriminals who pose as members of a firm’s IT department. By initiating remote sessions, they are able to either encrypt or exfiltrate sensitive client data. This sophisticated social engineering approach exploits the trust between legal professionals and their internal support teams, demonstrating that even sectors with robust security measures in place are not immune to the evolving tactics of cyber threats.
For more detailed information on the specifics of these cyber threats and their implications for law firms, the full report can be accessed here.