M&S and Co-op hacks: Scattered Spider is focus of police investigation

A group of cyber criminals, suspected to be young English-speaking individuals, are the focus of a police investigation into recent cyber attacks on UK retailers. The group, known as Scattered Spider, has been identified as a key part of the ongoing probe by the National Crime Agency (NCA). Paul Foster, head of the NCA’s national cyber crime unit, emphasized the importance of catching those responsible for the attacks, which have resulted in empty shelves in stores, the suspension of online ordering, and the theft of private data from millions of individuals.

Scattered Spider, described as a loose community of young individuals who communicate across various online platforms, is believed to be behind the rash of attacks using the DragonForce platform to carry out ransomware attacks. Despite the havoc caused by these attacks, the hackers responsible remain unidentified, and no arrests have been made. M&S and Co-op are among the retailers targeted, with M&S experiencing server disruptions due to ransomware, leading to stock shortages and the temporary cessation of online shopping.

The NCA has not ruled out the possibility that the English-speaking Scattered Spider group might not be based in the UK, as they utilize different online platforms to communicate and operate collectively. Scattered Spider has previously been linked to high-profile attacks, including targeting US casinos and Transport for London. The group’s tactics often involve social engineering techniques to manipulate individuals and breach victim organizations. Lisa Forte, from cyber security firm Red Goat, highlighted the group’s preference for exploiting IT help desk procedures through manipulation.

Hackers suspected to be affiliated with Scattered Spider recently anonymously contacted the BBC but did not confirm their association with the group. The NCA continues to investigate the breaches, urging organizations to review their IT help desk password reset processes to mitigate potential risks. A former teen hacker turned cyber security professional expressed little surprise at the involvement of teenagers in such cyber crimes, noting the accessibility of tools and the ease of conducting online searches

Read the full article from The BBC here: Read More