Silent Ransom Group
Tracked by CyberSIXT since 7 Apr
- Articlesall time
- 21
- Articleslast 30 days
- 6
- CVEs exploitedattributed · all time
- 0
- Research reportsall time
- 1
21 articles from 5 outlets; the latest 14 days ago.
- Article
- Research report
Show as table
Profile
Written by CyberSIXT from the sources listed below. Updated 26 Oct.
Silent Ransom Group is tracked as Luna Moth, Chatty Spider and UNC37532. Dark Reading described it as a financially motivated group that targets US law firms, professional services and financial organizations1. Security Affairs reported that it has historical ties to the now-defunct Conti ransomware gang3.
Dark Reading reported that between January and May 2026 UNC3753 used benign-looking emails to prompt phone calls that led to screen-sharing sessions1. Security Affairs reported that the group has also sent operatives to offices to install malicious USB devices3. DataBreaches.net reported that the group added Orrick, Herrington & Sutcliffe LLP to its leak site on 23 February 20264. The group posted data to its leak site on 30 March, and Jones Day confirmed a limited breach2.
Leaked chat logs list 27 firms that allegedly paid about $207 million between 3 April and 24 September 20265. DataBreaches.net said no law firm had confirmed paying the group6. The group told DataBreaches.net it had never been hacked6.
Sources
- Silent Ransom Group Targets Law Firms Using Vishing to Steal Data · Dark Reading · 2026-06-08
- Jones Day confirms breach after Silent Ransom Group phishing · DataBreaches.net · 2026-04-07
- UNC3753 gang uses vishing and USB drops to steal legal data · Security Affairs · 2026-06-08
- Law firm Orrick hit by SRG hack, data leaked after ransom talks · DataBreaches.net · 2026-04-10
- Silent Ransom Group Extorted 27 Law Firms Without Using Malware · Security Affairs · 2026-10-10
- Researchers question whether the Luna Moth leak really came from Silent Ransom Group · DataBreaches.net · 2026-10-09
Names and sources
- Luna Moth
- CyberSIXT coverage, Malpedia, MISP Galaxy
- Silent Ransom
- Malpedia, MISP Galaxy
- SilentRansomGroup
- Malpedia, MISP Galaxy, CyberSIXT coverage
- TG2729
- Malpedia, MISP Galaxy
- Silent Ransom Group (SRG)
- CyberSIXT coverage
MITRE ATT&CK® techniques
No MITRE ATT&CK® techniques are recorded for Silent Ransom Group.
Also mentioned alongside Silent Ransom Group (not attributed)1 CVE in the same articles
These articles name both the actor and the CVE. They do not attribute exploitation of these CVEs to Silent Ransom Group.
- Leaked files reveal how Luna Moth scammers trick staff into granting remote accessInfosecurity
- Cybercrime, Ransomware Arrests and Exploited Flaws Lead Security Affairs RoundupSecurity Affairs
- Unprotected MongoDB Backup Exposed Silent Ransom Group ChatsDataBreaches
- Silent Ransom Group Extorted 27 Law Firms Without Using MalwareSecurity Affairs
- Researchers question whether the Luna Moth leak really came from Silent Ransom GroupDataBreaches
- Leaked SRG Chats Claim $207 Million in Ransom Payments from Law FirmsDataBreaches
- Hogan Lovells Faces Repeat Ransomware Attack After $20m DemandDataBreaches
- Ransom Group Claims Greenberg Traurig Breach Exposed 126,000 PeopleDataBreaches
- Troutman Pepper Locke Suffers Second Silent Ransom AttackDataBreaches
- Silent Ransom Group hits Fox Rothschild, leaks law firm dataDataBreaches
- Silent Ransom Group Targets Law Firms Using Vishing to Steal DataDark Reading
- UNC3753 gang uses vishing and USB drops to steal legal dataSecurity Affairs
The latest 12 are listed. See all 23 articles in the timeline.