Silent Ransom Group (SRG): Switching To DNS Fast Flux Infrastructure
Silent Ransom Group (SRG): Switching To DNS Fast Flux Infrastructure
Publish Date: 2026-06-05 14:22:00
Source Domain: securityaffairs.com
Silent Ransom Group (SRG): Switching To DNS Fast Flux Infrastructure
Pierluigi Paganini
June 05, 2026
Researchers exposed the Silent Ransom Group ‘s Fast Flux infrastructure as the FBI warns of ongoing attacks targeting U.S. law firms and businesses.
Resecurity uncovered the Silent Ransom Group (SRG)’s Fast Flux network infrastructure and shares available intelligence with the cybersecurity community to disrupt their malicious activities and enable ISP/DNS providers to counter this threat.
“Resecurity is the first to uncover the SRG’s Fast Flux network infrastructure and is sharing this intelligence with the cybersecurity community to disrupt their malicious activities and enable ISP/DNS providers to counter this threat.” reads the report published by Resecurity.
The Silent Ransom Group, also known as Luna Moth, Chatty Spider, and UNC3753, is a cyber extortion group active since 2022 that focuses on stealing sensitive data and extorting victims rather than encrypting files. The group primarily targets organizations in sectors such as legal services, healthcare, hospitality, finance, and insurance.
The experts also outlined the use of X-CSRF (Cross-Site Request Forgery) token to prevent indexing of their Data Leak Site (DLS) – a unique, secret, and unpredictable string that a server-side application generates and assigns to a user’s session.
The Federal Bureau of Investigation (FBI) recently issued an advisory about the SRG, which is actively targeting U.S.-based law firms and other industries through social engineering and in-person attacks.
The Fast Flux nodes were identified in Latin America (Brazil, Mexico, Argentina, Ecuador, Colombia, Bolivia, Costa Rica, Peru, Panama), Eastern Europe (Bulgaria, Croatia, North Macedonia), Central Asia (Uzbekistan, Kyrgyzstan), Middle East/Africa (Egypt, Saudi Arabia, Tunisia), East Asia (South Korea), and Caribbean (Jamaica,…
-security.jpg?sfvrsn=982907ba_5 "A First Step to Unpacking Cyber, Deception, and Intelligence Contests")
