FBI warns of in-person data theft attacks from extortion gang
The FBI has issued a warning about the Silent Ransom Group (SRG), an extortion gang now employing in-person data theft tactics targeting U.S. law firms. This shift involves social engineering, including phishing and impersonating IT support, to gain physical access to victim computers and exfiltrate data. The group’s established history of targeting legal and financial organizations, coupled with their involvement in previous ransomware campaigns, highlights a significant and evolving threat.
The Silent Ransom Group (SRG) is escalating its attack methods, moving beyond traditional ransomware operations to focus on direct data theft. The group is leveraging social engineering, specifically phishing emails and phone calls posing as IT support, to trick employees into granting remote access to their systems. If this initial attempt fails, SRG deploys physical operatives to the victim's location to gain direct access to computers and steal data via USB drives or external hard drives. This approach represents a significant escalation in their tactics, increasing the potential for data compromise.