CrowdStrike 2026 Legal Threat Landscape Report: eCrime Leads Attacks, China Activity Intensifies

CrowdStrike’s 2026 Legal Threat Landscape Report finds that cyber intrusions against legal organizations nearly doubled from 2023 to 2026, driven primarily by the sector’s access to privileged communications, transactions, intellectual property, government matters, and financial records. Financially motivated eCrime actors accounted for 82% of observed threats, with ransomware, data theft, extortion, and resale of stolen information prominent methods; CHATTY SPIDER was especially active against U.S. law firms, using IT-impersonation schemes, remote-management tools, and reportedly even physical intrusions. Other emerging groups, including SNARKY SPIDER and CORDIAL SPIDER, used similar voice-phishing and single-sign-on phishing techniques. China-linked groups also intensified espionage activity through zero-day exploitation, cloud compromises, attacks on legal-sector software, password spraying, and targeting of senior personnel. Covering activity from September 2025 through August 2026, the report concludes that advancing AI may increase adversaries’ operational scale and sophistication, underscoring the need for ongoing intelligence-led defense and proactive threat hunting.

Use this post, company, and trend context to find content marketing opportunities, perform competitive analysis, or address product feature gaps via the Plushcap MCP server or the Plushcap API.