Ransomware Attack on The Rosen Law Firm by Black Basta

The Rosen Law Firm, P.A., a prominent legal practice specializing in securities law, has recently been targeted by the ransomware group Black Basta. This attack highlights the vulnerabilities faced by organizations in the legal sector, particularly those handling sensitive financial litigation.

About The Rosen Law Firm

Established in 2001, The Rosen Law Firm is headquartered in Los Angeles, with additional offices in New York and Pennsylvania. The firm employs approximately 84 individuals and generates an estimated revenue of $15.2 million. It is renowned for its expertise in securities class actions and shareholder derivative litigation, consistently ranking among the top firms in the United States for securities class action settlements. The firm's commitment to recovering damages for shareholders affected by corporate misconduct has positioned it as a leader in its field.

Attack Overview

The ransomware attack on The Rosen Law Firm was orchestrated by Black Basta, a notorious ransomware group known for its double extortion tactics. The group encrypts critical data and threatens to publish sensitive information on their leak site if the ransom is not paid. This attack underscores the persistent threat posed by ransomware groups and the need for effective cybersecurity measures to protect sensitive data.

About Black Basta

Black Basta emerged in early 2022 and is believed to have connections to the defunct Conti group. The group distinguishes itself through highly targeted attacks on organizations across the US, Japan, Canada, the UK, Australia, and New Zealand. Black Basta employs a range of tactics to gain initial access, including spear-phishing campaigns and buying network access. Once inside, they use tools like QakBot and Mimikatz for lateral movement and credential harvesting.

Potential Vulnerabilities

The Rosen Law Firm's focus on complex financial litigation and handling of sensitive shareholder information makes it an attractive target for ransomware groups like Black Basta. The firm's reliance on digital systems for managing client data and legal processes may have presented vulnerabilities that the attackers exploited. This incident serves as a reminder of the importance of continuous cybersecurity assessments and enhancements to safeguard against such threats.

Sources

• Rosen Law Firm - About
• Blackberry - Black Basta Ransomware
• Flashpoint - Understanding Black Basta Ransomware
• Sangfor - Black Basta Ransomware Attack