SilentRansomGroup

Key insights

• •Gains initial access through targeted social engineering, particularly callback phishing and vishing.
• •Employs legitimate remote access tools for data exfiltration instead of traditional malware.
• •Threatens to publish stolen data on dark web leak sites if ransom demands are unmet.
• •Ransom amounts range from $1 million to $8 million, pressuring victims into negotiations.
• •Operates with a 'living off the land' approach to evade detection by traditional security solutions.
• •Targets a variety of sectors, particularly legal services and healthcare.