Luna Moth Strikes Again: FBI Warns Law Firms of New Social Engineering Scam!
The FBI warns law firms of social engineering attacks by Luna Moth, a criminal extortion actor. Luna Moth uses IT-themed calls and callback phishing to gain remote access and extort victims. Known for using legitimate tools to avoid detection, Luna Moth has been active since 2022, targeting U.S. legal and financial sectors.
Hot Take:
Looks like Luna Moth is fluttering through law firms with all the finesse of a caffeinated hacker! When the FBI sends out an advisory, you know it’s time to stop answering those mysterious customer service calls. Remember, if it sounds like an IT emergency but smells like an invoice scam, it’s probably Luna Moth trying to get their cyber claws into your data. Who knew moths could be so chatty?
Key Points:
- Luna Moth, aka Chatty Spider, is targeting law firms using IT-themed social engineering and callback phishing.
- The campaign involves phone calls and emails tricking victims into granting remote access for data theft.
- Victims are then extorted to prevent the publication or sale of their sensitive data.
- Attackers use legitimate tools like Rclone and WinSCP to exfiltrate data undetected by security systems.
- Multiple fake helpdesk domains have been registered to spoof targeted organizations.
Already a member? Log in here