Report by CrowdStrike
2026 Legal Threat Landscape Report
7 FINDINGSPublished Oct 28, 2026
View Original Report →Key Findings
Financially motivated adversaries accounted for 82% of malicious activity targeting the legal sector.
Legal SectorFinancial Crime
In a CHATTY SPIDER intrusion, the adversary attempted to exfiltrate sensitive data four minutes after gaining initial access.
Data ExfiltrationLegal SectorThreat Actors
SNARKY SPIDER and CORDIAL SPIDER targeted the same law firm one month apart.
Threat ActorsLegal Sector
CHATTY SPIDER malicious activity increased by 129% against legal entities.
Threat ActorsLegal Sector
Big Game Hunting adversaries named 455 legal entities on data leak sites, a 39% year-over-year increase.
ExtortionData LeakLegal Sector
China-nexus adversary diversity doubled in the legal sector.
EspionageLegal Sector
MURKY PANDA targeted nearly 500 accounts at a single U.S. law firm from 300 IP addresses over a 30-day period.
Password SprayingLegal Sector