Cyber Attacks on UK Retailers: A Growing Concern

Strategic Insights -

Marks & Spencer, Co-op, and Harrods are the latest victims of a potentially crippling cyber attack, which has stolen personal details of millions of shoppers and hold the high street giants to ransom. The attacks come as security experts warn that another retailer is "inevitable" to fall prey to cyber attackers, with the sector going from the twelfth most targeted to fifth in the past two months. A gang known as DragonForce has been implicated in the attacks, with experts suggesting they "rent" malware to other gangs, who then carry out the hacking. The attacks have highlighted the growing concern of cyber threats on UK retailers, with experts warning that tens of thousands of businesses may have hackers inside their network already.

Key Takeaways:

  • The cyber attacks on Marks & Spencer, Co-op, and Harrods have stolen personal details of millions of shoppers and hold the high street giants to ransom.
  • The attacks come as security experts warn that another retailer is "inevitable" to fall prey to cyber attackers, with the sector going from the twelfth most targeted to fifth in the past two months.
  • DragonForce is a gang known for renting malware to other gangs, who then carry out the hacking.
  • The gang is believed to be based in Russia, with some experts suggesting a link to a pro-Palestinian group in Malaysia.
  • The cyber attacks have highlighted the growing concern of cyber threats on UK retailers, with experts warning that tens of thousands of businesses may have hackers inside their network already.
  • Aiden Sinnott, senior threat researcher at Sophos, stated that DragonForce essentially "rent" the malware to other gangs, who "use it to launch attacks, and give them 20% of all they make."
  • Professor Oli Buckley, a cyber security expert at Loughborough University, warned that ransomware attacks are like "setting off a digital bomb, data gets encrypted, systems go dark, and recovery means rebuilding safely from the ground up."
  • Genevieve Stark, head of cybercrime, hacktivism, and information operations intelligence analysis for the Google Threat Intelligence Group, stated that DragonForce's rules prohibit attacks on organizations in Commonwealth of Independent States nations and former Soviet Union countries.
  • Stuart Machin, M&S boss, has announced the firm's annual results on May 21, which will focus on the fallout from the cyber attack.

Statistics:

  • Over the past two months, the sector has gone from the twelfth most targeted to fifth.
  • A gang known as DragonForce has been implicated in the attacks.
  • DragonForce is believed to be based in Russia.
  • Tens of thousands of businesses in the UK may have hackers inside their network already.
  • The cyber attacks have wiped off over £1 billion from Marks & Spencer's stock market value.
  • The cyber attacks have resulted in the suspension of online clothing and homeware sales for Marks & Spencer.

Sources:

  • "Cyber attacks on UK retailers surge" by The Register (no date)
  • "M&S cyber attack: What we know so far" by The Telegraph (no date)
  • "Cyber attacks on UK retailers 'inevitable'" by BBC News (no date)
  • "Ransomware attacks 'like setting off a digital bomb'" by Sky News (no date)
  • "DragonForce: The gang behind the ransomware attacks" by Sophos (no date)