Google and FBI warn of ransomware group that sends fake IT workers to hack victims in person

Executive summary: Google and the FBI report that the Silent Ransom Group has been targeting law firms from January through May by combining phishing and social-engineering with physical impersonation of IT staff who access devices in person (via USBs or remote access) to steal contracts, personal data, and financial records; the group then uses a leak site to extort victims rather than (or in addition to) encrypting files.