SecurityFan score 3 · Tier D
Extortion Group Luna Moth Flits Into Law Firms a Second Time
Dark Reading · By Alexander Culafi ·
The Brief
- The extortion group Luna Moth is targeting law firms again, after the same firms refused to pay its first ransom.
- The new campaign uses social engineering to steal Microsoft access tokens.
- The source describes this as a return of the group's earlier attacks on law firms.
Why it matters
Law firms hold sensitive client data, and stolen Microsoft access tokens can give attackers access to the accounts behind them. Organizations that handle confidential material should treat social engineering requests as a real threat.
Who’s affected
- Law firms that refused Luna Moth's first ransom
- Organizations using Microsoft accounts
- #extortion
- #social-engineering
- #microsoft
- #law-firms
- #access-tokens
The cybercriminals are re-targeting law firms that refused to pay its first ransom, with a social engineering con aimed at stealing Microsoft access tokens.