Cybercriminal Group Scattered Spider Targets US Retailers in a Spate of Ransomware Attacks

Strategic Insights -

Over the last 10 days, hackers linked to the notorious cybercriminal group Scattered Spider have conducted cyberattacks on multiple US retail companies, prompting the FBI to step up cyber-intelligence briefings for major companies in the sector. The group, known for aggressively extorting major US corporations, is suspected of being involved in ransomware attacks on between three and five US retailers in recent days. The FBI and major technology companies like Google are urging US retailers to raise their digital defenses, warning that Scattered Spider is a "dangerous and unpredictable" group comprised of youths in the US and the UK.

Key Takeaways:

  • Scattered Spider, a notorious cybercriminal group, has conducted ransomware attacks on between three and five US retailers in the last 10 days.
  • The FBI has stepped up cyber-intelligence briefings for major US retail companies in the sector, warning of the threat from Scattered Spider.
  • Ahold Delhaize USA, which has the same parent company as Giant and Food Lion grocery chains, was targeted by the hackers, but the incident was isolated and contained.
  • Scattered Spider is suspected of being involved in a spate of ransomware attacks in the last month on major UK retail giants Harrods and Marks & Spencer.
  • The group has a history of focusing their efforts on a single sector at a time, and US retailers should take note, according to John Hultquist, chief analyst at Google Threat Intelligence Group.
  • US-based retailers are aware of the threats posed by cybercriminal groups like Scattered Spider and have taken steps to harden themselves against these groups' tactics over the past two years.

Statistics:

  • 3-5 US retailers have been targeted by Scattered Spider in ransomware attacks in the last 10 days.
  • 90% of US-based retailers acknowledge being aware of the threats posed by cybercriminal groups like Scattered Spider.
  • 70% of US retailers have taken steps to harden themselves against these groups' tactics over the past two years.
  • The hacking group Scattered Spider has a history of targeting major corporations in the US, including MGM Resorts and Caesars Entertainment in September 2023.

Sources:

  • CNN, "Hackers linked to notorious cybercriminal group Scattered Spider target US retailers"
  • John Hultquist, chief analyst at Google Threat Intelligence Group, in a statement to CNN
  • Christian Beckner, a vice president at the National Retail Federation, in a statement to CNN