alphv attacks Abrams & Bayliss LLP

Incident Date:

March 21, 2022

World map

Overview

Title

alphv attacks Abrams & Bayliss LLP

Victim

Abrams & Bayliss LLP

Attacker

Alphv

Location

Wilmington, USA

Delware, USA

First Reported

March 21, 2022

Abrams & Bayliss LLP Targeted by Alphv Ransomware Group

Company Overview

Abrams & Bayliss LLP is a law firm that focuses on high-risk commercial litigation and complex issues of Delaware Corporate law. The company's website provides no information about its size or number of employees.

Industry Standout

Abrams & Bayliss LLP stands out in the legal services sector by focusing on high stakes litigation support and transactional advice where there is a high risk of commercial litigation or complex issues of Delaware Corporate law.

Vulnerabilities

The specific vulnerabilities that led to the ransomware attack on Abrams & Bayliss LLP are not publicly disclosed. However, Alphv ransomware group is known for using advanced social engineering techniques and open source research on a company to gain initial access. The group often offers alleged "cyber remediation advice" or "vulnerability reports" explaining how they gained access to a victim's system.

Impact of the Attack

The impact of the ransomware attack on Abrams & Bayliss LLP is not publicly disclosed. However, the Alphv ransomware group is known for exfiltrating data and extorting victims without deploying ransomware, sometimes deleting data.

FBI's Takedown of Alphv Ransomware Group

The Alphv ransomware group, also known as Blackcat, has been disrupted by the FBI, which seized their dark web leak site. The group has compromised over 1,000 entities, with nearly 75% of these being in the United States, and has received nearly $300 million in ransom payments.

The ransomware attack on Abrams & Bayliss LLP by the Alphv ransomware group highlights the need for law firms and other businesses to be vigilant against cyber threats. The specific vulnerabilities that led to the attack are not publicly disclosed, but the group is known for using advanced social engineering techniques and open source research on a company to gain initial access.

Sources

Recent Ransomware Attacks

The Recent Ransomware Attacks (RRA) site acts as a watchtower, providing you with near real-time ransomware tracking of attacks, groups and their victims. Given threat actors’ overarching, lucrative success so far, ransomware attacks have become the most ubiquitous, and financially and informationally impactful cyber threat to businesses and organizations today.

The site’s data is generated based on hosting choices of real-world threat actors, and a handful of other trackers. While sanitization efforts have been taken, we cannot guarantee 100% accuracy of the data. Attack updates will be made as source data is reported by reputable sources. By viewing, accessing, or using RRA you acknowledge you are doing so at your own risk.