CrowdStrike 2026 Legal Threat Landscape Report: Cybercriminals Blur Digital and Physical Lines in Attacks on U.S. Law Firms
Business Wire•28/10/2026•08:00 ET
0
Key Highlights
- ➤CHATTY SPIDER malicious activity against legal entities surged 129%
- ➤Big Game Hunting adversaries named 455 legal entities on leak sites, up 39%
- ➤China-nexus adversary diversity doubled in the legal sector
- ➤MURKY PANDA targeted nearly 500 accounts at one U.S. law firm
- ➤CrowdStrike reported financially motivated adversaries drove 82% of observed activity
Expert Statements
Adam Meyers, Head of Counter Adversary Operations, CrowdStrike
“Law firms are the new ATM for cybercriminals. Adversaries are exploiting the value of privileged client information, and they're willing to go beyond the keyboard to get it.”
Adam Meyers, Head of Counter Adversary Operations, CrowdStrike
“We’re seeing criminals recruit individuals to physically infiltrate law firms, blurring the line between digital and physical attacks. Defenders need visibility across identities, endpoints, and cloud environments to detect and disrupt these operations before access turns into extortion.”
CrowdStrike 2026 Legal Threat Landscape Report: Cybercriminals Blur Digital and Physical Lines in Attacks on U.S. Law Firms
CHATTY SPIDER activity surges 129% as adversaries recruit individuals to infiltrate law firms, targeting privileged client information for data theft and extortion
Get started
Create a free account to read the full story.