ReportedUpdated 3 Nov 2026
Silent Ransom Group Extortion
What happened
Silent Ransom Group allegedly extorted $207 million from 27 law firms in six months using phone calls and social engineering, not encryption.
Reported impact
An affected population has not been established in the accepted evidence.
- Attack method
- phone calls and social engineering
- Attack method
- no malware required
Source evidence
1Read the original reporting and statements. Multiple articles may rely on the same underlying source.
Security Affairs01Silent Ransom Group Allegedly Extorted $207 Million Without Encrypting Files
Published 10 Oct 2026Retrieved 3 Nov 2026
The group’s internal deal board claims about $207M paid by 27 firms between April 3 and September 24, 2026. On-chain evidence supports the scale but not the exact figures.
Attributed reporting
2 more excerpts
Silent Ransom Group doesn’t rely on encryption. No malware payload, no locked files, just phone calls and social engineering aimed almost entirely at law firms, and apparently it works extraordinarily well.
Attributed reporting
Blank Rome disclosed a May incident where an attacker posed as internal IT and convinced an attorney to upload files to an external Google Drive, a classic Silent Ransom Group move with no malware required at all.
Attributed reporting
Updates and corrections
- Revision 1
Incident updated.