The infamous extortion gang Silent Ransom Group (SRG) has been impersonating IT support in a fresh campaign targeting law firms, the FBI warns.
Active since at least 2022, SRG has been targeting law firms in the US since at least 2023, mainly through callback phishing emails and social engineering calls, claiming to aid victims in canceling subscription fees.
In a May 2025 alert, the FBI warned of SRG’s phishing emails containing links to remote access software that allowed the attackers to quickly exfiltrate data from the victims’ systems.
In attacks observed this year, the threat actor has updated its tactics, now posing as an employee from the victim’s IT department.
“SRG actors either directly call or send phishing emails to urge employees to call the SRG actor posing as IT support,” the Bureau says in a new alert (PDF).
