Brett Callow of Emsisoft says ransomware attacks have struck five law firms recently, including three just this past weekend. Two of the affected firms have already had their information, which includes that of their clients, posted online for anyone to view. This is a tactic used by the attackers to urge the companies to pay the ransom. There is strong evidence that suggests Maze is the ransomware being used in these attacks. In this case, the malware made its way into the systems by way of emails that included malicious attachments that were more than likely crafted in a way that would get lawyers to open them. Callow is quoted saying, “The more data they publish and the more sensitive that data is, the less incentive an organization has to pay to prevent the remaining data being published. It’s the equivalent of a kidnapper sending a pinky finger.” If the ransomware is paid, the group will remove the paying company’s data from their website.
By Anthony Zampino Introduction Leading up to the most recent Russian invasion of Ukraine in