Retail cyber attacks: NCA arrest four for attacks on M&S, Co-op and Harrods
nationalcrimeagency.gov.uk
Retail cyber attacks: NCA arrest four for attacks on M&S, Co-op and Harrods
1–10 of 67 posts
Re: Retail cyber attacks: NCA arrest four for attacks on M&S, Co-op and Harrods
#2Little information there about them, but I find it kind of surprising that the suspects are even UK based..
Re: Retail cyber attacks: NCA arrest four for attacks on M&S, Co-op and Harrods
#3Crazy how young all these cyber criminals are. When I was their age, the peak of my criminal career was scoring booze by lying about my age. I wish they shared a little bit on what cyberattacks they were conducting.
Re: Retail cyber attacks: NCA arrest four for attacks on M&S, Co-op and Harrods
#4Apparently they pretended to be an employee and the help desk reset the password for them. Once in the door, active directory imploded as usual, with full access they encrypted everything and demanded ransome.
Source: https://specopssoft.com/blog/marks-spencer-ransomware-active...
Re: Retail cyber attacks: NCA arrest four for attacks on M&S, Co-op and Harrods
#5This stinks of foreign sponsorship. I can see how they could pull off the social engineering but being able to work their way around a foreign system like they did - no way.
Re: Retail cyber attacks: NCA arrest four for attacks on M&S, Co-op and Harrods
#6Crazy how young all these cyber criminals are. When I was their age, the peak of my criminal career was scoring booze by lying about my age. I wish they shared a little bit on what cyberattacks they were conducting.
I suspect that it is related to the M&S and Co-op attacks. https://www.bbc.co.uk/news/articles/cwykgrv374eo
Re: Retail cyber attacks: NCA arrest four for attacks on M&S, Co-op and Harrods
#7Little information there about them, but I find it kind of surprising that the suspects are even UK based..
Why is that surprising?
Re: Retail cyber attacks: NCA arrest four for attacks on M&S, Co-op and Harrods
#8Apparently they pretended to be an employee and the help desk reset the password for them. Once in the door, active directory imploded as usual, with full access they encrypted everything and demanded ransome. Source: https://specopssoft.com/blog/marks-spencer-ransomware-active...
Reminds me of Maersk. They had poor endpoint hygiene and no EDR. In 2017 about 90% of their infrastructure was wiped in less than one minute. They had to reinstall a lot of things due to backups weren't up to par. Usually level 1 merchants (> 6 million transactions per year) are put on an audit and improvement plan if this occurs. In the UK, there could be an investigation and penalty from the ICO for the data breach.
Re: Retail cyber attacks: NCA arrest four for attacks on M&S, Co-op and Harrods
#9Little information there about them, but I find it kind of surprising that the suspects are even UK based..
You have to buy underwear or prawn sandwiches in the UK to know M&S exists?
Re: Retail cyber attacks: NCA arrest four for attacks on M&S, Co-op and Harrods
#10Evil Tor used are blocked. Can't read site.