Silent Ransom Group Hits US Law Firms in Escalating Extortion Attacks

A DarkReading roundup highlights an intensifying threat landscape: financially motivated extortion groups (notably Silent Ransom Group and Qilin affiliates) are using vishing, IT-impersonation and even in-person intrusions to steal data from law firms; multiple supply-chain campaigns hit developer ecosystems (PyPI, NPM — Hades, IronWorm/Shai-Hulud); large-scale phishing/TDS operations (DriveSurge/ClickFix, Kali365) and automated EDR-evasion tooling are proliferating; and multiple high-risk zero-days and active exploits affect enterprise VPN and firewall products (Check Point VPN zero-day under