Luna Moth

Luna Moth, also known as the Silent Ransom Group (SRG), is a threat actor that has been identified by the cybersecurity industry for its malicious activities. This entity, which could be an individual, a private company, or part of a government, has been noted for its use of callback phishing scams as a method to exploit its victims. The group's tactics involve sending phishing messages to victims, often with content related to pending charges on their accounts, in order to lure them into revealing sensitive data. In June 2023, the FBI reported that SRG had been observed conducting callback phishing data theft and extortion attacks. The group was found to be deploying these attacks through call centers, further enhancing their ability to trick victims into sharing their personal information. These attacks involve the victim receiving a phone number in a phishing attempt, usually linked to alleged pending charges on their account. The Silent Ransom Group, or Luna Moth, has shown a consistent pattern of using these old tricks, particularly callbacks, to execute their phishing schemes. In one cited campaign, the group began by sending phishing messages to victims containing a phone number, typically associated with pending charges on the victims' accounts. The continuous use of such tactics underscores the need for increased vigilance and robust cybersecurity measures to protect against such threat actors.