# Extortion Group Luna Moth Flits Into Law Firms a Second Time

Source: [darkreading](https://www.darkreading.com/data-privacy/extortion-luna-moth-law-firms-second-time) · 2026-11-12 · Security
Page: https://themorning.dev/story/extortion-group-luna-moth-flits-into-law-firms-a-second-time-43b2bb31ce77af50
Kind: security · Impact: medium

## In brief

- The extortion group Luna Moth is targeting law firms again, after the same firms refused to pay its first ransom.
- The new campaign uses social engineering to steal Microsoft access tokens.
- The source describes this as a return of the group's earlier attacks on law firms.

## Why it matters

Law firms hold sensitive client data, and stolen Microsoft access tokens can give attackers access to the accounts behind them. Organizations that handle confidential material should treat social engineering requests as a real threat.

## Coverage

- [Extortion Group Luna Moth Flits Into Law Firms a Second Time](https://www.darkreading.com/data-privacy/extortion-luna-moth-law-firms-second-time) — darkreading, 2026-11-12

Tags: extortion, social-engineering, microsoft, law-firms, access-tokens

---

Brief generated by AI (claude-haiku-5-5) from the reporting listed under Coverage. Headlines belong to their publishers. The Morning Dev – https://themorning.dev