Live data from Hacker News

Retail cyber attacks: NCA arrest four for attacks on M&S, Co-op and Harrods

nationalcrimeagency.gov.uk

11–20 of 67 posts

Re: Retail cyber attacks: NCA arrest four for attacks on M&S, Co-op and Harrods

#12

Evil Tor used are blocked. Can't read site.

I only read sites that are written in Rust, and I can't load this one either. Can someone post a String Literal for us, please?

[flagged]

Re: Retail cyber attacks: NCA arrest four for attacks on M&S, Co-op and Harrods

#13

Crazy how young all these cyber criminals are. When I was their age, the peak of my criminal career was scoring booze by lying about my age. I wish they shared a little bit on what cyberattacks they were conducting.

Young people have little fear of repercussion as they cant really fathom the consequences. Either they learn from this misadventure or go on being a career criminal. All of this depends on their home lives.

Re: Retail cyber attacks: NCA arrest four for attacks on M&S, Co-op and Harrods

#15
post #2

Little information there about them, but I find it kind of surprising that the suspects are even UK based..

Why is that surprising?

I guess I’d expect them to be in a country where it’d be difficult to be apprehended and extradited. Being in the UK seems like a stupid move to me, but what do I know!

Re: Retail cyber attacks: NCA arrest four for attacks on M&S, Co-op and Harrods

#16

Crazy how young all these cyber criminals are. When I was their age, the peak of my criminal career was scoring booze by lying about my age. I wish they shared a little bit on what cyberattacks they were conducting.

Young people have little fear of repercussion as they cant really fathom the consequences. Either they learn from this misadventure or go on being a career criminal. All of this depends on their home lives.

This simply isn’t true. Yes, teenagers are morons by the standard of a well adjusted 30 year old, but they’re more than capable of understanding consequences for their actions.

I hate to sound like my parents/grandparents but I absolutely knew that causing millions of pounds of damage and attempting to blackmail a major corporation could have huge negative consequences for people and myself at 17.

Re: Retail cyber attacks: NCA arrest four for attacks on M&S, Co-op and Harrods

#17
post #8
post #4

Apparently they pretended to be an employee and the help desk reset the password for them. Once in the door, active directory imploded as usual, with full access they encrypted everything and demanded ransome. Source: https://specopssoft.com/blog/marks-spencer-ransomware-active...

Reminds me of Maersk. They had poor endpoint hygiene and no EDR. In 2017 about 90% of their infrastructure was wiped in less than one minute. They had to reinstall a lot of things due to backups weren't up to par. Usually level 1 merchants (> 6 million transactions per year) are put on an audit and improvement plan if this occurs. In the UK, there could be an investigation and penalty from the ICO for the data breach…

> They had to reinstall a lot of things due to backups weren't up to par.

"After a frantic search that entailed calling hundreds of IT admins in data centers around the world, Maersk’s desperate administrators finally found one lone surviving domain controller in a remote office—in Ghana. At some point before NotPetya struck, a blackout had knocked the Ghanaian machine offline, and the computer remained disconnected from the network. It thus contained the singular known copy of the company’s domain controller data left untouched by the malware—all thanks to a power outage... So the Maidenhead operation arranged for a kind of relay race: One staffer from the Ghana office flew to Nigeria to meet another Maersk employee in the airport to hand off the very precious hard drive. That staffer then boarded the six-and-a-half-hour flight to Heathrow, carrying the keystone of Maersk’s entire recovery process."

https://www.wired.com/story/notpetya-cyberattack-ukraine-rus...

Re: Retail cyber attacks: NCA arrest four for attacks on M&S, Co-op and Harrods

#18
A friend of mine is senior management at one of these companies. His life has been a real nightmare trying to get things back on track - there are so many interconnected systems that they needed to get back up 'clean' and running just to get their normal business running, let alone the online side. And he's not even directly responsible for any of this, but it's all so embedded in a modern retail business that if something like this happens it's your problem to deal with to a degree. The stress caused by this sort of thing is immense.

Re: Retail cyber attacks: NCA arrest four for attacks on M&S, Co-op and Harrods

#19
post #16

Earlier quoted context omitted.

Young people have little fear of repercussion as they cant really fathom the consequences. Either they learn from this misadventure or go on being a career criminal. All of this depends on their home lives.

This simply isn’t true. Yes, teenagers are morons by the standard of a well adjusted 30 year old, but they’re more than capable of understanding consequences for their actions. I hate to sound like my parents/grandparents but I absolutely knew that causing millions of pounds of damage and attempting to blackmail a major corporation could have huge negative consequences for people and myself at 17.

The probability they'll try to teach you to obey the law instead of locking you in a cell for life is significantly higher when you're 17 than when you're 35. Even better if you're 13, though.

Re: Retail cyber attacks: NCA arrest four for attacks on M&S, Co-op and Harrods

#20
post #14

Related Reddit thread : https://www.reddit.com/r/cybersecurity/s/LXb88TKC4M

This doesn’t surprise me. I work for a company that hires a substantial headcount from TCS, probably one of their biggest clients, and the quality of the work is astonishingly bad.

I’d recommend avoiding at all costs but we all know these companies are brought in by non-technical people.

Post reply on HN