Silent Ransom Group Targets Law Firms with Fast Flux Infrastructure

• •The Silent Ransom Group uses DNS Fast Flux to evade detection and maintain operations.
• •Law firms are primary targets due to their management of sensitive client data.
• •The FBI has issued advisories regarding ongoing attacks against U.S. businesses.

The Silent Ransom Group (SRG), a cyber extortion group active since 2022, has been identified using DNS Fast Flux infrastructure to target U.S. law firms and other sensitive industries. Unlike traditional ransomware, SRG focuses on data theft and extortion without encryption. The FBI has issued warnings about ongoing attacks, particularly against law firms that manage sensitive client data. Resecurity has uncovered SRG's Fast Flux network, which uses compromised devices to create a resilient infrastructure against takedowns. The group is known for exploiting vulnerabilities in IoT devices and customer premises equipment. The advisory highlights the need for collaboration between public and private sectors to combat this threat. The SRG's activities have been linked to other underground projects, indicating a broader network of cybercrime. Law firms are particularly vulnerable due to the sensitive nature of the data they handle.