The FBI is warning U.S. businesses about a group of scammers posing as IT support to gain access to sensitive information. The group, known as the Silent Ransom Group, targets law firms and other businesses by pretending to be IT support and asking to install remote access software or sit at a computer for a quick fix.
How the Scam Works
The scam often starts with a phone call, where the person on the phone pretends to be IT support and tries to convince the employee to install remote desktop software. If the employee refuses or the plan fails, the attacker may send someone to the office, posing as tech support. Once seated at the computer, they can insert a USB drive or external hard drive and gain access to sensitive files.
The FBI says the group uses stolen data to extort victims, threatening to sell the files or post them online. They may also call employees or clients to pressure the company into paying. Law firms are particularly vulnerable to this type of attack, as they hold sensitive information such as client records, lawsuits, contracts, financial details, and private negotiations.
Protecting Yourself
To protect yourself from this type of scam, the FBI recommends being cautious of surprise IT visits and verifying the identity of anyone claiming to be from IT support. Businesses should also restrict USB access, monitor for new remote access software, and review alerts when those tools appear on computers that should not have them.
Employees should only access files they need for their role, and strong access controls can reduce the damage from a stolen laptop session or a fake IT visit. Businesses should also track device connections, file transfers, and privilege changes to help spot suspicious activity after an unauthorized visit.
A receptionist or office manager should have a written checklist for unexpected visitors, including photo ID, company name, ticket number, and approved contact. Visitors should never wander through an office alone, and a fake IT worker counts on confusion.
If someone shows up pretending to be IT support, report it right away to your manager, your IT team, and local law enforcement if needed. Businesses can also report cybercrime tips to the FBI’s Internet Crime Complaint Center at IC3.gov.
Original reporting: Fox News (HLL/CB) — read the source article.
