Scattered Spider hackers in UK are ‘facilitating’ cyber-attacks, says Google
UK-based members of the Scattered Spider hacking community are actively “facilitating” cyber-attacks, according to Google, as disruption to British retailers spreads to the US.A group of hackers labelled “Scattered Spider” have been linked with attacks on UK retailers Marks & Spencer, the Co-op and Harrods, with Google cybersecurity experts warning this week that unnamed retailers across the Atlantic are being targeted as well.Charles Carmakal, the chief technology officer at Google’s Mandiant cybersecurity unit, said that the threat had moved to the US in a pattern typical of Scattered Spider assailants.“They tend to focus on a particular industry sector and geography for a few weeks and then they move on to something else,” he said.“And right now they’re focused on retail organisations.
They start in the UK, and now they’ve shifted to US organisations,”Asked if UK members of Scattered Spider were involved in hacking M&S, he said: “Without specifically naming who the victims are I will say broadly Scattered Spider members in the UK are facilitating and contributing to intrusions,”On Friday it emerged that M&S had warned its staff that some of their personal data may have been stolen in the cyber-attack last month,Sources told the Daily Telegraph that workers were told email addresses and full names were believed to have been taken as part of the hack,Earlier this week M&S revealed that some personal information relating to thousands of customers was taken by the hackers.
The targeting of retailers in the UK, and the techniques associated with Scattered Spider, has prompted the country’s cybersecurity agency to warn companies to look out for specific tactics,In an advisory note, the National Cyber Security Centre told businesses to look at how their IT help desks help staff members reset passwords,One gambit associated with Scattered Spider – a name coined for a set of hacking tactics rather than an homogenous group – is to ring up IT help desks and pretend to be employees or contractors in order to gain access to company systems,“What we’re seeing is they’re making telephone calls, calling up help desks, pretending to be employees and convincing helpdesks to reset passwords,” said Carmakal,Carmakal added that the task of ringing up helpdesks was sometimes carried out by younger members of the Scattered Spider network.
“It’s not always the [threat] actors themselves … that are actually making the phone calls.They outsource some of that work to other members of the broader community, generally younger individuals that aggregate on Telegram and Discord and want to make a few hundred bucks.”Sign up to Business TodayGet set for the working day – we'll point you to all the business news and analysis you need every morningafter newsletter promotionScattered Spider is unusual among hacking groups deploying ransomware because it is composed of native English speakers from countries such as the UK, US and Canada.Carmakal said he had listened to “countless calls” that Scattered Spider hackers have made to company employees, “whether they were extorting them, or trying to convince somebody to provide credentials or harassing somebody”.Ransomware gangs infect their targets’ computer systems with malicious software that effectively locks up their internal files, which the criminals then offer to release in exchange for a payment.
Typically, these gangs are from Russia or former Soviet states.Carmakal’s comments came as French luxury brand Dior said this week an “unauthorised external party” had accessed some customer data.The scale of the breach and the identity of the attacker remains unclear, although Paris-based Dior said no payment information had been taken.This week Google’s cybersecurity specialists said Scattered Spider was targeting US retailers.“The US retail sector is currently being targeted in ransomware and extortion operations that we suspect are linked to … Scattered Spider,” said John Hultquist, the chief analyst at Google Threat Intelligence Group.
“The actor, which has reportedly targeted retail in the UK following a long hiatus, has a history of focusing their efforts on a single sector at a time, and we anticipate they will continue to target the sector in the near term,US retailers should take note,”
US PGA Championship 2025: second round – as it happened
Thanks for reading today. A few shots still to be played before everything is wrapped up but no television pictures so we’ll bid farewell.Scott Murray will guide you through all the weekend action. Can Rory McIlroy repeat history? Will Bryson DeChambeau fire? Is Scottie Scheffler going to land a third major championship victory? Or are we due a surprise? Join Scott tomorrow to find out!The Venezuela player holds a two-shot advantage over the field, but Scottie Scheffler will be the man whose shadow looms darkest for the pace-setter.-8: Vegas (F) -6: Pavon (F), Fitzpatrick (F), SW Kim (F) -5: Homa (F), Scheffler (F) -4: Stevens, (F), MacIntyre (F), Poston (F), Smalley (F), Fox (F), Bezuidenhout (F), Thorbjornsen (F), McCarthy (F), Gerard (F), Higgo (17)Catch up with the day’s action with Ewan Murray’s report
Tyrrell Hatton faces fine for US PGA outburst as Vegas leads the pack
Tyrrell Hatton’s love-hate relationship with his professional domain continues. The Englishman will inevitably be fined after a foul-mouthed tirade during his second round of the US PGA Championship was picked up on live television coverage.Hatton was within a shot of the lead when reaching the tee at the 18th, his 9th. Hatton’s drive found a water hazard. What happened next was rather typical for a player prone to tempestuous moments on golf courses
Brock Purdy reportedly agrees to $265m extension with San Francisco 49ers
The San Francisco 49ers and quarterback Brock Purdy have agreed to a five-year, $265m contract extension, ESPN’s Adam Schefter reported Friday. The deal includes $181m in guaranteed money, solidifying Purdy’s role as the franchise quarterback moving forward.Purdy, 25, was the final pick of the 2022 NFL draft – familiarly known as ‘Mr Irrelevant’ – but quickly defied expectations. After stepping in as the starter midway through his rookie season, Purdy led the 49ers to back-to-back playoff appearances, including a trip to the Super Bowl in February 2024. He was also named to the Pro Bowl and finished fourth in MVP voting that season
Jannik Sinner recovers to beat Paul and set up dream Rome final against Alcaraz
Four matches into his comeback at the Italian Open, the level displayed by Jannik Sinner had only underscored his status as the best tennis player in the world. He had marched past every challenge in his path, reaching the semi-finals without dropping a set.Consistent excellence in professional tennis, however, also means finding solutions when things aren’t going well. Sinner handled his first real challenge in Rome spectacularly well, recovering from heavily losing the first set to smother Tommy Paul of the United States 1-6, 6-0, 6-3. “These kind of matches I need,” said Sinner
In-form George Ford guides Sale to emphatic win over playoff rivals Bristol
This match was billed as a shootout for a playoff place, which was only a slight exaggeration, and Sale won emphatically to leapfrog Bristol and take a huge stride towards confirming a top-four finish.Alex Sanderson’s men are formidable on home soil and a bonus-point success, orchestrated by another masterly display from George Ford, gave them a 26th win from 29 Premiership games in Salford dating back to the start of the 2022- 23 campaign. It was no less than Sale deserved, such was the energy and effervescence of their display in running in five tries past one of their closest rivals, who claimed a potentially priceless losing bonus point late on.Sale travel to Exeter in their final game knowing a win will put them in the playoffs for the third consecutive season, while Bristol host Harlequins in a fortnight with their top-four hopes more in the balance.“I still have nightmares about going to Exeter three or four years ago when I first signed for Sale and being 19-0 up but ending up losing the game,” said Sanderson
Bairstow shines at the Oval, bees stop play at New Road: county cricket – as it happened
In Division One, a feisty Jonny Bairstow frisked 89 at a honey-warm Oval, where the Guardian football writer Jonathan Wilson and his stag do were among the 6,000 spectators. There were three wickets apiece for Surrey’s Jordan Clark and Tom Lawes and a gravity-defying catch by Ben Foakes, hanging in the air like an unvoiced memory. Adam Lyth added another fifty to his hefty season’s collection, but Yorkshire wilted after tea.The Nottinghamshire captain Haseeb Hameed was a sea of calm on a stormy scorecard at Chester-le-Street, carrying his bat for 206. Brydon Carse, playing in his first game for Durham this season after a toe injury, bowled through 14 overs, and grabbed three wickets
Residents of Dorset village that inspired Thomas Hardy fight back against expansion
More protections have been added to assisted dying bill, says Kim Leadbeater
‘Much-needed grit’ to be fostered in England’s schoolchildren, say ministers
Ministers ‘oblivious’ to UK’s scale of violence against women and girls, say MPs
Starmer defends prison recall shake-up that will free some domestic abusers
NHS gave private firms record £216m to examine X-rays in 2024