Ransomware needs a way in. Stolen credentials are the cheapest one.
Silent Ransom Group / LeakedData Ransomware Group
Ransomware group profile
Description
Silent Ransom Group, also known as LeakedData, emerged in March 2022 after the Conti ransomware's collapse. This group specializes in data theft and extortion without using traditional ransomware encryption, focusing on pressuring victims to pay ransoms through threats of public data release.
Key insights
- •Primarily uses social engineering tactics such as callback phishing and vishing to gain initial access.
- •Impersonates IT support to trick employees into granting remote access to systems.
- •Utilizes legitimate remote access tools for execution and data exfiltration, employing methods that minimize forensic evidence.
- •Maintains a dark web site where stolen data can be publicly leaked if ransom demands are not met.
- •Targets a wide range of sectors, particularly focusing on legal firms and healthcare organizations.
Threat Level & Status Breakdown
For Silent Ransom Group / LeakedData · Based on incidents in selected period
Status Breakdown
Recent activity
Monthly attack count for Silent Ransom Group / LeakedData in the selected period
No intelligence data for this group.
TTPs & Attack Vectors
Tools, initial access, and MITRE ATT&CK techniques for Silent Ransom Group / LeakedData
T1490
T1490
T1078
T1078
T1059
T1059
T1486
T1486
T1562
T1562
T1021
T1021
T1046
T1046
T1203
T1203
T1110
T1110
T1080
T1080
T1573
T1573
T1049
T1049
Victims(34)
| Company | Country | Status | Discovered | |
|---|---|---|---|---|
| Fagen Friedman & Fulfrost LLP | United States | Claimed | 5 months ago | |
| F...n F...n & F... LLP | United States | Claimed | 5 months ago | |
| Cox, Castle & Nicholson LLP | United States | Claimed | 5 months ago | |
| Goulston & Storrs | United States | Claimed | 5 months ago | |
| Jones Day | United States | Claimed | 5 months ago | |
| Plunkett Cooney | United States | Claimed | 5 months ago | |
| Harris Beach Murtha | United States | Claimed | 5 months ago | |
| B...ge & D...d PC | — | Claimed | 5 months ago | |
| G... R...d | — | Claimed | 5 months ago | |
| J...n L...is | — | Claimed | 5 months ago | |
| R... T... | — | Claimed | 5 months ago | |
| W... S... H... | — | Claimed | 6 months ago | |
| HEMIC - Hawaii Employers' Mutual Insurance Co | United States | Claimed | 6 months ago | |
| Nations Financial Group Inc | United States | Claimed | 6 months ago | |
| Two River Group Holdings LLC | United States | Claimed | 6 months ago | |
| Plaza Home Mortgage | United States | Claimed | 6 months ago | |
| Singleton Schreiber | — | Claimed | 6 months ago | |
| Wood Smith Henning & Berman LLP | United States | Claimed | 6 months ago | |
| Phelps Dunbar | United States | Claimed | 6 months ago | |
| Pl... Coo... | — | Claimed | 6 months ago |
Page 1 of 2
Affected countries(22)
Countries where this group has been reported to target or leak victims.