Read more about the M&S, Co-op and Harrods hacks:
- M&S Shuts Down Online Orders Amid Ongoing Cyber Incident
- Harrods Latest UK Retailer to Fall Victim to Cyber-Attack in Recent Days
- UK’s NCSC Offers Security Tips as Co-op Confirms Data Loss
Anonymous individuals identifying as members of the DragonForce cybercriminal syndicate have claimed to be behind the cyber-attacks on Marks & Spencer, Co-op and Harrods.
They contacted several media outlets, including the BBC and Bloomberg, with evidence that they had infiltrated the three UK retailers' IT networks and stolen large amounts of customer and employee data.
Notably, they told BBC News that the Co-op breach was more extensive than Co-op had previously admitted.
Reporting by BleepingComputer on the Marks & Spencer hack suggested that while the intruders used the DragonForce encryptor on M&S’s VMware ESXi hosts to encrypt virtual machines, they are likely associated with Scattered Spider.
This conclusion reportedly comes from an investigation requested by M&S and conducted by CrowdStrike, Microsoft and Fenix24.
No tags.
