FBI Alerts on Silent Ransom Group Targeting Law Firms

**Executive Summary:** The FBI warns that the Silent Ransom Group (SRG, aka Luna Moth/Chatty Spider/UNC3753) has been targeting U.S. law firms since 2022 using callback phishing and direct phone-based social engineering to persuade victims to install legitimate remote access tools (e.g., AnyDesk, Zoho Assist), then exfiltrate sensitive data via WinSCP or disguised Rclone before threatening publication on leak sites; the group leaves minimal forensic traces, often avoids privilege escalation, and relies on social engineering and legitimate tooling to evade detection.