I'll be presenting tomorrow on the topic of Cybercrime and Law Firms. Here are a few of the sources that I used for the presentation (some of which didn't make it into the final cut):
Small firms having their online banking accounts cleaned out: http://krebsonsecurity.com/2014/01/firm-bankrupted-by-cyberheist-sues-bank/
Taking over websites with automatic exploits, serving malware to customers: http://www.trendmicro.com/cloud-content/us/pdfs/security-intelligence/white-papers/wp-asprox-reborn.pdf
Hackers might delete all of your email: http://www.abajournal.com/news/article/unaware_that_anonymous_hacking_group_existed_until_friday_law_firm_partner/
Bank and law firm involved in litigation over heist: http://krebsonsecurity.com/2013/04/bank-sues-cyberheist-victim-to-recover-funds/
Toronto law firm hacked for "six figure" amount: http://avoidaclaim.com/2012/ontario-law-firm-victim-of-large-fraud-due-to-infection-by-trojan-banker-virus/
Further coverage of Toronto firm that was hacked: http://www.lawtimesnews.com/201301072127/headline-news/law-firms-trust-account-hacked-large-six-figure-taken
ONCA case about insurance coverage: http://canlii.org/en/on/onca/doc/2007/2007onca122/2007onca122.html
State (re: China) espionage: http://www.theglobeandmail.com/technology/tech-news/hackers-linked-to-china-sought-potash-deal-details-consultant/article534297/
How the Target hack was probably carried out: http://krebsonsecurity.com/2014/01/a-first-look-at-the-target-intrusion-malware/
70 class actions filed against Target: http://www.whiteandwilliams.com/resources-alerts-The-Bull-s-Eye-On-Targets-Back-Lessons-From-The-TJ-Maxx-Data-Breach-Class-Actions.html
2010, US law firm attacked with spearphishing email: http://online.wsj.com/news/articles/SB10001424052748704363504575002301498625456
2013 ACH hack: http://krebsonsecurity.com/2013/11/feds-charge-calif-brothers-in-cyberheists/
Law firm emails leaked: http://www.pcmag.com/article2/0,2817,2399909,00.asp
Examples of data breaches: http://en.wikipedia.org/wiki/Data_breach