FBI Warns: Hackers Use USB Drives to Steal Data

FBI Warns: Hackers Use USB Drives to Steal Data

The FBI says a cybercrime group is now sending people directly to offices to gain access to computers and steal sensitive data. Here’s what changed and why every organization should pay attention.

What Happened?

According to SecurityWeek, the FBI has issued a new warning about attacks carried out by the Silent Ransom Group (SRG), a cybercrime group that has targeted US law firms since at least 2023.

The group is known for phishing (fake messages designed to trick people) and social engineering (manipulating people into giving access or information). In its latest campaigns, SRG has started pretending to be internal IT support staff.

The FBI says attackers either send phishing emails or call employees and convince them to contact someone posing as technical support. If remote access attempts fail, the attackers may send a person directly to the office. That individual claims they need to fix a computer issue and inserts a USB device or external drive into the victim’s computer.

Who Was Affected and What Data Was Stolen?

The FBI’s alert focuses on law firms in the United States, but it does not name specific victims or say how many organizations were affected.

According to the Bureau, the attackers’ goal is not to lock files with ransomware. Instead, they steal sensitive information and then demand payment to keep the data private.

The FBI did not publicly disclose exactly what information was taken in recent incidents. However, law firms often store confidential client records, legal documents, financial information, and personal data.

Data theft can create risks long after an incident disappears from the headlines. Criminals may use stolen information in phishing emails, impersonation attempts, identity theft, or financial fraud. Many people also do not realize their information was involved until suspicious activity appears later.

If you are not sure whether your information was leaked somewhere online, checking regularly can help you spot problems earlier. 

With Futureproof, you can quickly check whether your email appeared in known data leaks and get simple steps to secure your account.