CrowdStrike: CHATTY SPIDER hired a man to walk into a US law firm

CrowdStrike says the CHATTY SPIDER gang hired a Russian national who posed as an internal IT employee to enter a US law firm in November 2025 and helped install remote access tools. The group's activity rose 129% in the first eight months of 2026, with law firms making up nearly 90% of its victims.

• CHATTY SPIDER activity grew 129% in January–August 2026 versus all of 2024
• Law firms accounted for nearly 90% of the group's victims
• The operative posed as IT staff and helped deploy remote access tools
• Ransomware groups named 455 legal entities on leak sites, up 39% year over year