Google and FBI warn of ransomware group that sends fake IT workers to hack victims in person

The Silent Ransom Group has escalated ransomware attacks by impersonating IT support staff and physically accessing victim offices to steal data via USB drives and remote access tools, targeting law firms with a hybrid approach combining social engineering, phishing, and in-person intrusions. This represents a significant shift in threat methodology that bypasses traditional security controls and requires IT organizations to extend threat modeling beyond digital channels to include physical security, vendor verification, and employee access protocols. The data exfiltration (not encryption) extortion model creates immediate business liability through potential public exposure of sensitive client and financial information.