Archive — US — techcrunch
Google and FBI warn of ransomware group that sends fake IT workers to hackvictims in person
Google and the FBI warn that the Silent Ransom Group uses fake IT workers to physically access victims' offices, stealing data directly from computers. This tactic targets law firms, combining traditional cyberattacks with in-person infiltration, leading to data breaches without encrypting victims' files.
Key points
- Ransomware group targeting law firms by sending fake IT support workers.
- Imposters steal data using USB drives and remote access tools.
- Attacks occurred from January to May, affecting dozens of victims.
- Tech firm Mandiant reports increased use of physical access in cyberattacks.
- The gang employs phishing and social engineering tactics to gain entry.
- Data theft occurs without traditional encryption, making it a unique form of ransomware.
Why it matters
- Highlights the evolving nature of cybercriminal tactics, especially in the context of rising ransomware attacks.
- Reflects growing concerns about cybersecurity risks in sensitive industries like law and finance.
- Aligns with IT trends toward improved security protocols and awareness in response to increasing physical infiltration threats.
The ingenious blend of physical and digital tactics by cybercriminals underscores the urgent need for enhanced security measures and awareness in organizations to combat such evolving threats.