A cybercriminal group known as Scattered Spider, previously responsible for cyberattacks on UK retailers like Marks &amp; Spencer, is now targeting the US retail sector. Utilizing DragonForce ransomware, Scattered Spider employs sophisticated tactics such as SIM swapping and phishing to infiltrate security systems. These attacks are particularly aimed at industries where downtime results in significant financial and reputational damage.
Experts, including those from Google’s Mandiant, stress the importance of enhancing cloud security and user awareness to counter these advanced threats. Mandiant has offered a free guide for businesses to bolster their cybersecurity defenses. Given the nature of Scattered Spider’s tactics, even mature security programs can be at risk, making vigilance crucial for US retailers.
In the incident involving Marks &amp; Spencer, the attack led to the theft of customer data, although no financial details were compromised. This breach resulted in service disruptions and potential reputational damage, prompting the retailer to consider a £100 million insurance claim. Market analysts highlight the necessity for companies to adapt to evolving cybersecurity challenges and the associated costs of insurance claims related to such breaches.
Given the increasing sophistication and reach of Scattered Spider, both the UK and US retail sectors are urged to reassess and strengthen their cybersecurity frameworks to mitigate the risks posed by these aggressive and creative hackers.

Collections

The Scattered Spider cybercriminal group, known for attacking UK retailers, is now targeting the US retail sector using DragonForce ransomware and tactics like SIM swapping and phishing. Experts emphasize the importance of improving cloud security and raising user awareness. A notable incident involved Marks & Spencer, where customer data was stolen, leading to service disruptions. US and UK retailers are advised to strengthen their cybersecurity frameworks to counter these advanced threats.

Marks & Spencer Faces Cyberattack: Customer Data Compromised