FBI: Silent Ransom Group Adopts Vishing Campaign Against Law Firms

The FBI warns that the Silent Ransom Group (Luna Moth) is conducting targeted vishing campaigns against law firms, combining phone-based social engineering with callback phishing to trick employees into granting remote access (via Zoho Assist, AnyDesk, Syncro, Splashtop, Atera). Once connected they exfiltrate sensitive data using tools like WinSCP or renamed/hidden Rclone and then extort victims by threatening to publish stolen data — a highly effective, malware-free extortion technique that evades traditional antivirus detection.