Silent Ransom Group Threatens US Law Firms With LEAKEDDATA Data Leak Site

UNC3753 (also tracked as Silent Ransom Group / Luna Moth / Chatty Spider) is conducting an active financially motivated campaign (Jan–May 2026) against US law firms and financial services that emphasizes pure data-theft extortion rather than ransomware. The group uses sophisticated social-engineering and physical intrusions — hijacking BYOD endpoints to access corporate VDIs, crawling document management systems (e.g., iManage) for sensitive records, and exfiltrating data via WinSCP, cloud storage, or removable USBs — then issues aggressive three-day extortion ultimatums; the report includes mitigation guidance and three IPv4 IOCs.