REvil hackers extort law firm with Lady Gaga, Nicki Minaj, Elton John as clients

By Bradley Barth for SC Media
Wednesday, May 13, 2020

• 3.8k
• 37
• 36
• 36
• 18
• More
• 36
• 36

SC Media reached out to Grubman Shire Meiselas & Sacks for comment, but has so far not received a reply. However, the law firm officially confirmed the breach to the entertainment publication Variety.

“Law firms are increasingly becoming desirable targets of sophisticated cyber gangs,” said Ilia Kolochenko, founder and CEO of ImmuniWeb. “It is often much easier and faster to breach a mid-sized law firm to get ultra-confidential data compared to targeting its large clients directly, such as banks or celebrities as reportedly happened in this case.”

Kolochenko said few law firms are prioritizing investment in holistic cyber resilience and defense, understanding their attack surface or conducting sufficient employee training. “Furthermore, a considerable number of law firms have no incident detection and response capacities, often leaving them unable to detect an intrusion in a timely manner. Worse, modern law firms have to deal with diversified digital flow of sensitive and privileged data on their mobile phone, laptops and office computers. Partners and clients exacerbate this convoluted landscape by uploading confidential documents to public cloud or file sharing websites.”

For that reason, Kolochenko concluded, “law firms are a low hanging fruit for cybercriminals, enabling the latter to get their hands on crown jewels of major organizations without spending much effort.” Read Full Article