ISC Stormcast For Tuesday, September 22nd, 2026 https://isc.sans.edu/podcastdetail/10104, (Tue, Sep 22nd)
The ISC Stormcast highlighted a significant increase in BEC (Business Email Compromise) attacks targeting the legal sector, driven by a sophisticated phishing campaign leveraging leaked LinkedIn data. Attackers are impersonating legal professionals to pressure clients into transferring funds, and the campaign is rapidly expanding due to the availability of detailed contact information.
The SANS Internet Storm Center’s latest Stormcast identified a concerning trend: a substantial rise in Business Email Compromise (BEC) attacks specifically targeting the legal industry. The core of this surge is a highly effective phishing campaign exploiting publicly available LinkedIn data. Attackers are meticulously crafting emails that mimic legitimate communications from legal professionals, often including details like case numbers, client names, and internal jargon to build trust and pressure victims into transferring funds to fraudulent accounts. The campaign’s success is fueled by the ease with which attackers can obtain detailed contact information from LinkedIn, allowing them to personalize their attacks and increase their chances of success. The ISC noted that this campaign is not localized and is impacting firms across multiple jurisdictions. The threat actors are demonstrating a high level of sophistication and adaptability, continuously refining their tactics to evade detection and maximize their gains.