The culprit behind the M&S cyber attack is still a matter of investigation but speculation has pointed to a group called Scattered Spider.
Also called UNC3944, Octo Tempest or Muddled Libra, Scattered Spider is a hacking group comprised of hackers – some thought to be as young as 16. Members are said to frequent hacker forums, Telegram channels and Discord servers and are believed to be linked to the “Com”, a loosely affiliated community known for cyber and real-world criminal activity. According to Graeme Stewart, the head of public sector at security company Check Point, “Scattered Spider is one of the most dangerous and active hacking groups we are monitoring. “Since they first appeared in 2022, they have been linked to more than 100 targeted attacks across industries such as telecoms, finance, retail and gaming.” Members have been suspected of a hack on Caesars casinos – which cost the group $15m (£11.2m) to restore its network.
Read more…
Source: Yahoo News
Sign up for our Newsletter
The latest news and insights delivered right to your inbox.
Related:
- Experts warn 2,000 hacked WordPress sites were secretly running a global crime ring
August 22, 2026
Check Point Research has unearthed a global cybercrime ring that relied on a network of WordPress websites. The investigation into an operation dubbed “StopAndProtect” found a network of 5,000 infected computers around the globe, and 2,000 WordPress domains. WordPress currently provides content management for around 43% of websites worldwide, making it the most significant CMS available. ...
- Private equity firm Apollo confirms data breach amid hacking wave targeting financial giants
August 21, 2026
Private equity giant Apollo Global Management has confirmed a data breach in which hackers stole reams of personal information from the company’s cloud systems. The breach comes a month after security researchers sounded the alarm on a new hacking campaign targeting financial and private equity giants. The financial giant confirmed the incident in a letter filed with California’s ...
- Securing the overlooked corners of the Software Development Lifecycle (SDLC) supply chain
August 21, 2026
While supply chain threats have been quietly compounding over the past decade, the last 12–18 months have triggered a drastic shift in the scale and velocity of these attacks. Rather than just hunting for bugs in finished software, attackers are targeting the everyday tools and code developers rely on. Unit 42 research shows this happening at ...
- The invisible passenger in your car
August 21, 2026
While monitoring Android threats in June 2026, Kaspersky discovered a new piece of Android malware. What struck the researchers as unusual was that it installed like an ordinary user app yet made no attempt to disguise itself as legitimate software: it had no user interface at all. This led us to suspect the app might ...
- Hackers are spending millions on expired domains to enable malware scams
August 21, 2026
A domain name is the closest thing the web has to a credit history: age, inbound links, search visibility, and reputation all feed the reputation scores that security products consult before deciding whether a request is worth worrying about. New research from Infoblox Threat Intel claims this history has become a commodity with a market price, and that at least ...
- Medical records, SSNs, and bank details exposed in CareCloud data breach
August 21, 2026
Healthcare technology giant CareCloud has confirmed that a data breach earlier this year impacted more than 3.75 million people, making it one of the largest healthcare data incidents disclosed this year. The New Jersey-based company, which provides electronic health record (EHR) and practice management services, first flagged the intrusion in an SEC filing back in March, but the true scope ...