Blockchain researchers at Chainalysis and Crystal Intelligence have partially verified leaked internal communications from Russian extortion group Silent Ransom Group (SRG), confirming that certain cryptocurrency wallet addresses in the material match known SRG ransom payments, including one funded entirely from a $10 million+ victim payment. The leaked "Luna Moth Files" allege SRG collected around $207 million from 27 law firms between April and September 2026, with the group converting cryptocurrency to cash through instant exchangers, a Moscow-based broker, and a sanctions-flagged exchange service. SRG's tactics include callback phishing and physical intrusions into law offices by recruited "field agents," with analysts noting that payments made directly to these agents via regulated exchanges represent the group's greatest vulnerability to law enforcement identification.
