By AJ Vicens
Oct 7 (Reuters) – Leak data posted to the internet has exposed payments made to a hacking group known for extorting large sums of money from law firms, blockchain investigations firm Chainalysis said on Wednesday.
The findings come after an unknown party posted troves of data allegedly associated with Silent Ransom Group, a prolific cyber extortion group. The FBI warned in May that the group was stealing data from law firms with hacks and demanding millions of dollars to prevent it from being posted.
• The FBI says the SRG targets specific firm employees with phone calls, emails and sometimes in-person visits to gain access to victims’ computers in order to enable access to targeted computer networks.
• A website titled “The Luna Moth Files,” published earlier this week by an unknown party, posted what it alleged was troves of the group’s data, including chat logs, alleged ransom demand totals, documents and other materials associated with the group’s work, and dozens of cryptocurrency wallet addresses.
• Reuters could not immediately verify the authenticity of the site’s claims or data, but Chainalysis said in an X post on Wednesday that “certain leaked SRG addresses sit downstream of millions of dollars in ransomware payments that SRG has extorted from victims.”
• Chainalysis said certain cryptocurrency addresses contained in the leaks include addresses Chainalysis was already tracking prior to the leak, including one that reflected a $10 million victim payment SRG collected in mid-2026.
• SRG has been alleged to be involved in hacks on prominent law firms including Fox Rothschild and Jones Day, Reuters has previously reported.
(Reporting by AJ Vicens in Detroit; Editing by Mark Porter)
