BladesDynamicDemoBlade

Sc media logo

News

Tech radar pro logo

The cyber wire logo

Abnormal Security is tracking a threat actor dubbed “Crimson Kingsnake” that’s launching business email compromise (BEC) attacks by impersonating attorneys, law firms, and debt recovery services.

Crimson Kingsnake BEC group impersonates law firms.

Cybersecurity researchers have spotted crooks impersonating major law firm powerhouses to try and trick people into making payments for bogus work.

These devious cybercriminals impersonate law firms to steal your data

Tech times logo

Decipher podcast logo

Researchers have identified a new business email compromise (BEC) group that has been impersonating legitimate attorneys, law firms and debt recovery services in order to trick accounting employees into paying fake invoices.

UK-Based Threat Actors Impersonate Global Law Firms in BEC Attacks

Cybersecurity experts have found evidence of criminals posing as powerful multinational legal firms to scam victims into paying for work that never existed.

BEC Gang Crimson Kingsnake Poses as Legal Firms to Extort Money from Victims

Homepage

Breadcrumbs

Abnormal AI provides advanced email security to prevent credential phishing, business email compromise, account takeover, and more.

Abnormal AI

Popular international law firms including Deloitte, Monlex International, Dentons, and Sullivan & Cromwell have been impersonated by business email compromise group Crimson Kingsnake in "blind BEC attacks," which were initially detected in March, reports BleepingComputer.

International law firms spoofed in Crimson Kingsnake BEC campaign

Popular international law firms including Deloitte, Monlex International, Dentons, and Sullivan & Cromwell have been impersonated by business email…

description

international, firms, monlex, dentons, popular, including, deloitte, sullivan, cromwell, impersonated, business, email, compromise, group, crimson

keywords

https://images.abnormalsecurity.com/production/images/press/sc-media-logo.png?w=1200&h=630&q=82&auto=format&fit=crop&dm=1636389164&s=523498fba19cc3f02deac996268ce56a

https://abnormal.ai/about/news/international-law-firms-spoofed-in-crimson-kingsnake-bec-campaign

referrer

robots

twitter:card

twitter:creator

twitter:description

https://images.abnormalsecurity.com/production/images/press/sc-media-logo.png?w=800&h=418&q=82&auto=format&fit=crop&dm=1636389164&s=1211500a08cc66cb4685be856007c4e5

twitter:image

twitter:image:alt

twitter:image:height

twitter:image:width

twitter:site

twitter:title

{"title":{"title":"International law firms spoofed in Crimson Kingsnake… | Abnormal AI"}}

Demo

Schedule a Demo

AI's Role in Cyber Defense

CNBC Disruptor 50: Abnormal Security

Generative AI Could Revolutionize Email—for Hackers

Ones to Watch in Tech

Email Subscribe

<p>Subscribe to our newsletter to receive updates on the latest attacks and new trends in the email threat landscape.</p>

Newsroom

Introducing Abnormal’s Biggest Product Release Yet

<p>Announcing Our Biggest Product Release Yet</p>

vs Mimecast

vs Avanan

Secondary CTA

Whether FormComplete is utilized on a form

FormComplete

CTA Display

What text is displayed on the primary CTA (see sheet for details on copy)

Primary CTA Text

Form Columns

chakra-ui-ChakraProvider

Button

EmbeddedVideo

EyebrowText

Footer

Screen

PrimaryCtaText

FormColumns

CtaDisplay

VsMimecast

SecondaryCta

VsAvanan

Abnormal Solutions

react-awesome-reveal

lottie-react

date-fns

plasmic-nav

react-scroll-parallax-global

plasmic-embed-css

Abnormal Pages

loading-boundary

plasmic-query

plasmic-basic-components

Abnormal Legal

Abnormal Why Abnormal

Abnormal Landing Pages

react-aria

plasmic-rich-components

Abnormal Partners

Abnormal Products

Abnormal Design System

Abnormal Marketing

antd5 hostless

react-slick

Gartner mq 4x

Analyst Research

Gartner names Abnormal a Leader in Email Security Platforms, placed furthest for Completeness of Vision.

Abnormal Named a Leader in 2024 Gartner® Magic Quadrant™

Email Security

B 1500x1500 MKT856 Aimpoint report 1

White Papers

Discover how replacing your SEG with Abnormal’s behavioral AI boosts protection, cuts costs, and reduces manual work—backed by real customer results.

The Unexpected Benefits of Replacing a Secure Email Gateway with Abnormal AI

Abnormal Platform

B 1500x1500 Aim Point SAT Awareness Survey Report

Discover why traditional SAT programs are falling short and how modern, AI-enhanced approaches reduce human risk and improve your security posture.

2025 State of Security Awareness Training

B Inside the AI Arms Race Malicious AI WP

Discover how attackers are abusing trusted AI tools and using malicious GPTs to scale cybercrime—and how to stay ahead of the threat.

Inside the AI Arms Race: How Cybercriminals Exploit Trusted Tools and Malicious GPTs

Generative AI

B H1 2025 Email Threat Report

Threat Reports

Learn how the malicious use of AI is amplifying the impact of BEC, VEC, and phishing attacks in our latest threat report.

H1 2025 - Adversarial AI: Attacker Innovation Escalates Advanced Email Threats

International law firms spoofed in Crimson Kingsnake BEC campaign

See How Abnormal AI Protects Humans