Hackers are cyberattacking law firms increasingly more in 2023, according to an industry report.
GootLoader and SocGholish are the two malware variants being used in these cyberattacks.
- The hackers are targeting vulnerable WordPress websites and adding new blog posts without the owners' knowledge.
- The hackers then use SEO poisoning to direct as many targets as possible toward the infected websites.
- Once the target enters an infected web page and hits the link to download the business agreement, GootLoader begins being installed on the device.
- Malware like GootLoader and SocGholish is said to be one the main drivers behind the increase of browser-based attacks in the last two years.
- The threat vector has become the most common business email compromise method.