- The Federal Bureau of Investigation (FBI) has warned that cyber criminals are posing as IT support staff to gain physical access to critical computer systems.
- A hacking collective known as Silent Ransom Group (SRG) has been turning up at US offices, impersonating IT workers to install malware and steal sensitive data for ransom.
- SRG, active since 2022, has recently shifted from remote cyber attacks to these in-person hacks, primarily targeting law firms, with medical and insurance sectors also at risk.
- This trend demonstrates how criminals are resorting to surprisingly low-tech methods, such as plugging in storage devices, to bypass advanced AI-powered cyber defence systems.
- Cyber security experts emphasise that robust, layered security, including physical security and employee verification, is crucial, as simple social engineering can lead to significant breaches despite advanced technological defences.
IN FULL
