As the virtual world expands and the presence of the Internet takes over all areas of communication, so does malware. This new word means malicious software and its main mission is to infiltrate into any device without the user's prior knowledge. The legal sector has experienced a greater number of cyberattacks in recent times due to the sensitivity of its data and information.

The five most common cyberattacks affecting the legal sector are:

Lazarus

Lazarus is dedicated to the hijacking of computers and systems with the aim of obtaining confidential information and then asking for a financial ransom. This malware renames the encrypted files and adds the .Lazarus extension. Moreover, it creates a file called Read-Me-Now.txt in which the ransom is demanded. Legal professionals must protect themselves from these attacks that continue to grow among the professions that deal with sensitive data.

Stalkerware

Analysts from around the world point out that this type of malware has skyrocketed since confinement, increasing cases by 55.2% globally. The goal of the stalkerware is unlimited access to text messages, photos, social media, camera and microphone of any device from another user. Legal firms must highlight the importance of these attacks on their employees since the information that can be extracted may be of vital importance for a case in which they are working.

OAuth

OAuth is an open standard that allows you to add business features and user interface enhancements to cloud platforms such as Microsoft 365 and Google Workspace, very useful tools in the legal sector. But it is also a key element for cybercriminals as they are creating malicious OAuth 2.0 applications on the premise of gaining access to private data.

MassLogger

It is mainly used for the theft of vital data and information. MassLogger will record keystrokes which worryingly compromises the privacy and security of the information being typed. Lawyers must verify that they are not being victimized by this malware to ensure good use of their clients' data.

Ransomware

It is a malware used to extort high-level professionals or those who have very valuable information. Lawyers from important legal firms are not exempt from this type of cyberattack since the main mission is not to allow the user access to their personal documents of vital importance, such as relevant cases that are currently being dealt with. Special care must be taken since it is difficult to solve it and an exorbitant monetary price is usually requested for the release of the data.