ISC Stormcast For Tuesday, September 8th, 2026 https://isc.sans.edu/podcastdetail/10084, (Tue, Sep 8th)
The ISC Stormcast highlighted a significant increase in BEC (Business Email Compromise) attacks targeting the legal industry, driven by a sophisticated phishing campaign leveraging leaked LinkedIn data. Attackers are impersonating legal professionals to trick clients into transferring funds to fraudulent accounts. The campaign is particularly effective due to the detailed personalization of emails and the use of legitimate-looking branding.
The SANS Internet Storm Center’s latest Stormcast identified a concerning trend: a surge in Business Email Compromise (BEC) attacks specifically targeting the legal industry. The core of this escalation stems from a campaign exploiting leaked LinkedIn data, allowing attackers to craft highly convincing and personalized emails mimicking legal professionals. These emails are designed to appear as urgent requests for wire transfers, often involving complex legal matters and fabricated deadlines. The attackers are meticulously building trust by referencing specific cases and using legitimate-looking branding materials sourced from the targeted law firms’ LinkedIn profiles. The campaign’s success is attributed to the attackers’ thorough research and ability to exploit the trust already established between legal professionals and their clients. The ISC urges vigilance within the legal sector and beyond, emphasizing the need for enhanced security awareness training and robust email authentication protocols.