New Email Scam Targeting Law Firm Intake Processes
We want to make you aware of a sophisticated email scam that is increasingly targeting the client intake process at law firms. When successful, these attacks can lead to significant financial losses, data breaches, and business disruption.
How the Scam Works
- A prospective client contacts your firm by phone to discuss a potential legal matter.
- The individual follows up via email and provides case-related information, often including links to documents, images, or supporting evidence.
- When a staff member clicks the provided link to access the documents, they are directed to what appears to be a legitimate file-sharing or document portal.
- The website prompts the employee to enter their Microsoft 365 or email credentials to view the files.
- Once those credentials are entered, the attacker immediately gains access to the employee’s email account.
What Happens Next
With control of a trusted email account, the attacker can operate undetected while impersonating the employee. Common tactics include:
- Monitoring email conversations involving vendors, clients, and financial transactions.
- Altering payment instructions or banking information on invoices.
- Redirecting client payments to fraudulent accounts.
- Initiating wire transfer fraud.
- Accessing confidential client information and sensitive firm data.
- Using the compromised account to target additional employees within the organization.
Because the attacker is working from a legitimate email account, these fraudulent communications often appear authentic and can be difficult to detect.
Protecting Your Firm
We encourage all law firms to remain vigilant during the intake process, especially when receiving unsolicited document links from prospective clients. Employees should verify unusual requests, avoid entering credentials into unfamiliar websites, and report suspicious emails immediately.
Multi-factor authentication (MFA), advanced email security, security awareness training, and ongoing monitoring can significantly reduce the risk of a successful compromise.
If you’d like to learn how Data Troop helps organizations identify, prevent, and respond to threats like these, we’d be happy to schedule a brief conversation.
Data Troop is the Delaware Valley’s premier IT support and cybersecurity partner. We help small and mid-sized businesses stay secure, productive, and protected from today’s evolving cyber threats. Let us become your outsourced IT department and trusted technology advisor.