Scattered Spider Hackers Linked to UK Retail Cyber Attacks, Police Confirm

NCA Investigates 'Scattered Spider' Collective

• 🎯 The UK's National Crime Agency (NCA) is actively investigating the cyber-criminal group Scattered Spider in connection with recent attacks on British retailers.
• 💡 This is the first time police have officially confirmed this focus, moving beyond speculation.

Impact on UK Retailers

• 🛍️ Marks and Spencer (M&S) is experiencing ongoing disruption from a cyber attack, impacting online orders and product availability, with an estimated cost of £300 million.
• 🔐 Co-op had millions of customer and staff data records stolen, leading to the shutdown of parts of its systems.
• 🌐 Other retailers like Harrods and some US retailers have also been targeted by similar anonymous hackers.

Profile of Scattered Spider

• 🧒 The group is believed to consist of young individuals, some in their teens, and are primarily native English speakers.
• 💻 They communicate and operate as a collective across various online platforms and channels.
• 🌍 Past high-profile attacks attributed to Scattered Spider include those on US casinos and Transport for London.
• 🇪🇸 Law enforcement has made arrests, including an alleged member in Madrid and charges against several young men, some as teenagers.

Ransomware Tactics and Recovery

• 🚨 The M&S incident is widely understood in the cybersecurity industry to be ransomware, involving data theft, file scrambling, and a ransom demand.
• ⏳ Recovery from ransomware can be lengthy, potentially requiring rebuilding entire networks from scratch if a ransom is not paid.
• 💸 The Co-op attack did not appear to involve the final scrambling step, suggesting a different outcome or resolution.

Advice for Customers

• ⚠️ Customers of targeted retailers should change their passwords and remain vigilant.
• 🎣 Stolen data, including personal details and purchasing history, can be used for secondary attacks or phishing attempts.