FBI warns of in-person data theft attacks from extortion gang
The extortion group Silent Ransom Group (SRG) is now focusing its in-person data theft activities on American legal firms, the FBI warned on Tuesday.
As of spring 2026, SRG actors pretend to be employees of the victim's IT department through a social engineering strategy. The FBI issued a flash alert on Tuesday warning that SRG actors pose as IT help and either call employees directly or send phishing emails encouraging them to do so.
The SRG actor instructs the staff member to provide access to a remote desktop session while they are on the phone. In the event that the effort is unsuccessful, SRG dispatches a threat actor to the victim's location in order to obtain access and implant a storage device into the victim's computer.
Malicious actors can steal data by physically visit...