Legal — Cyber Threat Activity

Threat actors, incidents and malware targeting the Legal sector — 1 recorded incident and 10 tracked groups.

• Recorded incidents: 1
• Incidents, trailing 180 days: 0
• Tracked threat actors: 10
• Malware families: 15

All sectors

Threat actors targeting Legal

• Qilin 1 incident
• Medusa Ransomware researched targeting
• HAFNIUM researched targeting
• Triple X researched targeting
• Redact researched targeting
• APT19 researched targeting
• PerSwaysion researched targeting
• RedCurl researched targeting
• TheDarkOverlord researched targeting
• WIRTE researched targeting

Malware used against Legal

Families used by the threat actors that target this sector, derived from actor tooling rather than observed in these incidents directly.

• Cobalt Strike Malware
• Impacket Tool
• PsExec Tool
• China Chopper Malware
• Empire Tool
• Rclone Tool
• AshTag Malware
• ASPXSpy Malware
• Covenant Tool
• Ferocious Malware
• Havoc Malware
• IronWind Malware

Where these victims are

• United States 1

Recent incidents

• Thilges & Bernhardt, Attorneys at Law 2025-01-14

Coverage. 76.7% of incidents in our log carry a sector classification; the remainder name a victim we have not placed in an industry. Counts here are a floor, not a total, and are not comparable between sectors of different sizes.

Read the full analysis on IntelFusions