Trustwave Rapid Response: CrowdStrike Falcon Outage Update. Learn More

Trustwave Rapid Response: CrowdStrike Falcon Outage Update. Learn More

Services
Capture
Managed Detection & Response

Eliminate active threats with 24/7 threat detection, investigation, and response.

twi-managed-portal-color
Co-Managed SOC (SIEM)

Maximize your SIEM investment, stop alert fatigue, and enhance your team with hybrid security operations support.

twi-briefcase-color-svg
Advisory & Diagnostics

Advance your cybersecurity program and get expert guidance where you need it most.

tw-laptop-data
Penetration Testing

Test your physical locations and IT infrastructure to shore up weaknesses before exploitation.

twi-database-color-svg
Database Security

Prevent unauthorized access and exceed compliance requirements.

twi-email-color-svg
Email Security

Stop email threats others miss and secure your organization against the #1 ransomware attack vector.

tw-officer
Digital Forensics & Incident Response

Prepare for the inevitable with 24/7 global breach response in-region and available on-site.

tw-network
Firewall & Technology Management

Mitigate risk of a cyberattack with 24/7 incident and health monitoring and the latest threat intelligence.

Solutions
BY TOPIC
Offensive Security
Solutions to maximize your security ROI
Microsoft Exchange Server Attacks
Stay protected against emerging threats
Rapidly Secure New Environments
Security for rapid response situations
Securing the Cloud
Safely navigate and stay protected
Securing the IoT Landscape
Test, monitor and secure network objects
Why Trustwave
About Us
Awards and Accolades
Trustwave SpiderLabs Team
Trustwave Fusion Security Operations Platform
Trustwave Security Colony
Partners
Technology Alliance Partners
Key alliances who align and support our ecosystem of security offerings
Trustwave PartnerOne Program
Join forces with Trustwave to protect against the most advance cybersecurity threats
News Releases

Trustwave SpiderLabs Finds Law Firms Top Ransomware Targets in Professional Services

Chicago – June 26th Trustwave, a leading cybersecurity and managed security services provider, today released a comprehensive report titled "2024 Professional Services Threat Landscape: Trustwave Threat Intelligence Briefing and Mitigation Strategies." The research reveals a rise in ransomware, third-party supplier exposure, and technology-based attacks targeting professional services firms.

The professional services sector, which includes consulting, accounting, legal, and other business services, is a prime target for threat actors due to the treasure trove of sensitive information these businesses contain. This data can range from intellectual property to legal documents to client personally identifiable information (PII), which can be sold on the Dark Web or used to launch additional attacks.

"Across today's B2B and B2C vendor supply chains, a cybersecurity breach for professional services firms isn't just an inconvenience, it can be catastrophic," said Trustwave Global CISO Kory Daniels. "The financial losses from recovery, legal fees, and potential fines are just the tip of the iceberg. The severe reputational damage can erode years of client trust and stall future business. Operational disruptions, employee stress, and increased regulatory scrutiny further compound these challenges. This is why robust cybersecurity is no longer optional, it's a critical priority for these information-rich firms.”

Trustwave SpiderLabs' latest research delves into the attack flow employed by threat groups, shedding light on their tactics, techniques, and procedures. Professional services firms face a unique cybersecurity challenge due to a combination of factors including complex vendor ecosystems, regulatory burden, and extremely high value data.

The Trustwave SpiderLabs report analyzes threat groups and their methods throughout the attack cycle, from initial foothold through to data exfiltration. To ensure comprehensive coverage, this report examines cybersecurity challenges facing professional service firms, including legal services, consulting services, and accounting services. While a broad coverage area, the sector encompasses businesses that sell expertise and intellectual capital rather than tangible products.

A few key findings from the report include:

  • Law firms are the most vulnerable professional services entities to ransomware attacks, accounting for 46% of incidents.
  • Phishing is a leading threat within professional services, responsible for a staggering 93% of initial access gained by attackers.
  • 20% of ransomware attacks in the professional services industry were carried out by ALPHV, with LockBit 3.0 and 8Base accounting for 19% and 18%, respectively.

To access the full Trustwave SpiderLabs threat report, "2024 Professional Services Threat Landscape: Trustwave Threat Intelligence Briefing and Mitigation Strategies," please click here.

 

About Trustwave

Trustwave is a globally recognized cybersecurity leader that reduces cyber risk and fortifies organizations against disruptive and damaging cyber threats.

Trustwave’s comprehensive offensive and defensive cybersecurity portfolio detects what others cannot, responds with greater speed and effectiveness, optimizes its client’s cyber investment, and improves security resilience. Trusted by thousands of organizations worldwide, Trustwave leverages its world-class team of security consultants, threat hunters, and researchers, and its market-leading security operations platform to decrease the likelihood of attacks and minimize potential impact.

Trustwave is an analyst-recognized leader in managed detection and response (MDR), managed security services (MSS), cyber advisory, penetration testing, database security, and email security. The elite Trustwave SpiderLabs team provides industry-defining threat research, intelligence, and threat hunting, all of which are infused into Trustwave services and products to fortify cyber resilience in the age of inevitable cyber-attacks.

For more information about Trustwave, please visit: https://www.trustwave.com/en-us/.

Latest News Releases

Trustwave Named in 2024 Gartner® Market Guide for Managed Detection and Response

Chicago – July 18, 2024 – Trustwave, a global cybersecurity was named a Representative Vendor in the newly released 2024 Gartner® Market Guide for Managed Detection and Response (MDR).

Read More

Trustwave Honored with Leadership and Career Growth Awards

Chicago – June 19, 2024 – Trustwave, a global cybersecurity and managed security services leader, today announced it was awarded with two new Comparably awards: 2024 Best Companies for Career Growth...

Read More

Trustwave Unveils New Offerings to Maximize Value of Microsoft Security Investments

Chicago, IL – June 4, 2024 – Trustwave, a leading cybersecurity and managed security services provider, today announced an expanded portfolio of offerings designed to help organizations unlock the...

Read More