Hackers Go Physical: USB Drops Target US Law Firms

The Russian-speaking Silent Ransom Group is employing a rare and risky tactic by hiring individuals in the US to physically infiltrate law firms. These hired hands, often offered as little as $500, are tasked with plugging USB drives into law firm computers to bypass remote cybersecurity defenses. This strategy aims to gain access to sensitive client data, which the group then uses for significant ransom demands.

In the last six months alone, the Silent Ransom Group has reportedly extorted approximately $100 million from law firms through these methods and other digital intrusions. The FBI is aware of numerous physical access attempts across the US and is investigating the group, which is believed to have ties to the defunct Conti ransomware gang.

This physical approach represents a concerning escalation in cybercrime, as it combines digital hacking with in-person tactics. Cybersecurity experts note that while digital methods are more common, physical presence can exploit human trust and bypass sophisticated digital protections. The FBI is tracking payments on the blockchain as part of its investigation into the group's activities.