UK Charges Four in ‘Scattered Spider’ Ransom Group - Authorities in the United Kingdom this week arrested four alleged members of “Scat... https://krebsonsecurity.com/2025/07/uk-charges-four-in-scattered-spider-ransom-group/ #nationalcrimeagency #neer-do-wellnews #owendavidflowers #scatteredspider #marks&spencer #starfraudchat #allisonnixon #thalhajubair #ransomware #co-opgroup #earth2star #mgmcasino #everlynn #operator #asyntax #harrods #lapsus$ #amtrak #doxbin #bo764 #fbi

Three teenage males and a young woman hauled away by cops, suspected of hacking huge retailers.

Four youngsters are in custody today, alleged to be the notorious #ScatteredSpider hackers (or at least, some of them). The “loose affiliation” of hackers is suspected of badly disrupting operations at three large retail chains since April.

The four are innocent until proven guilty. In #SBBlogwatch, we channel Sir William Garrow.

@TheFuturumGroup @TechstrongGroup @SecurityBlvd: https://securityboulevard.com/2025/07/arrests-scattered-spider-richixbw/

Even more arrests! Reuters reports:

Four people have been arrested as part of a police investigation into cyberattacks that disrupted the operations of retailers Marks & Spencer, the Co-op and Harrods, Britain's National Crime Agency said.

The cyberattack on M&S was the most serious, costing it about 300 million pounds ($409 million) in lost operating profit.

The NCA said two males aged 19, another aged 17, and a 20-year-old female were apprehended in the West Midlands, central England, and London on Thursday on suspicion of Computer Misuse Act offences, blackmail, money laundering and participating in the activities of an organised crime group.

More at https://www.reuters.com/business/retail-consumer/uk-police-arrest-four-connection-with-ms-co-op-cyberattacks-2025-07-10/

M&S head Archie Norman won’t say if he authorized #DragonForce #ransomware hacker payday.

British shopping titan M&S is still dealing with the mess caused by April’s #ransomware attack. There’s at least three months more work ahead says the firm’s chairman, Archie Norman (pictured).

But there are persistent rumors M&S paid #ScatteredSpider’s ransom demand. In #SBBlogwatch, Norman will neither confirm nor deny.

@TheFuturumGroup @TechstrongGroup @SecurityBlvd: https://securityboulevard.com/2025/07/marks-spencer-archie-norman-ransom-richixbw/

This is a timely reminder to ensure any third-parties with access to your systems follow the same cyber policies you'd expect your internal staff to follow.

#ScatteredSpider are particularly good at #SocialEngineering their way via a third-party to other victims.

For clarity, #ScatteredSpider are considered the initial access group, #DragonForce #ransomware is the malware deployed once #ScatteredSpider are inside your network.

https://www.bleepingcomputer.com/news/security/mands-confirms-social-engineering-led-to-massive-ransomware-attack/

The hacking group responsible for recent attacks on M&S, Qantas and others has ramped up its efforts to phish companies across sectors.

https://www.computing.co.uk/news/2025/security/m-s-hackers-gear-up-new-attacks

A Group of Young Cybercriminals Poses the ‘Most Imminent Threat’ of Cyberattacks Right Now

https://www.wired.com/story/scattered-spider-most-imminent-threat/

Qantas confirms customer data breach amid Scattered Spider attacks – Source: securityaffairs.com https://ciso2ciso.com/qantas-confirms-customer-data-breach-amid-scattered-spider-attacks-source-securityaffairs-com/ #rssfeedpostgeneratorecho #informationsecuritynews #ITInformationSecurity #SecurityAffairscom #CyberSecurityNews #PierluigiPaganini #ScatteredSpider #SecurityAffairs #SecurityAffairs #BreakingNews #SecurityNews #hackingnews #CyberCrime #Cybercrime #DataBreach #hacking #Qantas

#Qantas discloses #cyberattack amid #ScatteredSpider #aviation breaches

https://www.bleepingcomputer.com/news/security/qantas-discloses-cyberattack-amid-scattered-spider-aviation-breaches/

Aviation Industry Under Attack!
On June 28, 2025, hacker group Scattered Spider hit airlines including Hawaiian Airlines and WestJet. No damage reported, but it’s a major wake-up call.

Known for using call centers to breach networks
16B passwords leaked recently cybersecurity must go proactive
#CyberAttack #ScatteredSpider #AviationHack #DataBreach #CyberSecurity #TechNews #TECHi

Read Full Article Here :- https://www.techi.com/aviation-cyberattack-scattered-spider-breach-airlines-usa-canada/

#ScatteredSpider hackers shift focus to #aviation, #transportation firms

https://www.bleepingcomputer.com/news/security/scattered-spider-hackers-shift-focus-to-aviation-transportation-firms/

Scattered Spider hackers are now targeting aviation and transport by posing as trusted insiders—imagine getting a call from "IT support" that isn’t really IT support. How deep does their deception go?

https://thedefendopsdiaries.com/scattered-spider-hackers-shift-focus-to-aviation-and-transportation-firms/

#scatteredspider
#cybersecurity
#socialengineering
#aviationsecurity
#transportationsecurity

As expected, more details are emerging in other news outlets about the arrest of #ShinyHunters.

One detail I noted is that ShinyHunters is suspected of being responsible for the attacks on #LVMH, which is the high-end brand associated with Tiffany and Dior, who both reported breaches this year. Although there had been some speculation that #ScatteredSpider might be responsible for those breaches, it appears that ShinyHunters was allegedly responsible.

There have been a number of hacks this year where it is not clear -- in the absence of law enforcement confirmation -- whether a #databreach has been by Scattered Spider or ShinyHunters, or whether they have collaborated with one doing the hacking and the other doing the extortion. I predict in weeks/months to come, we will be given a pretty big list of big hacks that ShinyHunters has been involved in this year.

As I reported in my coverage of the PowerSchool hack and prosecution of Matthew Lane, ShinyHunters' name has been linked to that one, too, but was not named as a co-conspirator.

This is where I should write "This is a developing story..." huh?

@campuscodi

Aflac, one of the USA’s largest insurers, is the latest to fall “under siege” to hackers - The Wall Street Journal reports that Aflac is investigating a breach that may have expose... https://grahamcluley.com/aflac-one-of-the-usas-largest-insurers-is-the-latest-to-fall-under-siege-to-hackers/ #scatteredspider #ransomware #insurance #dataloss

#Aflac discloses breach amidst #ScatteredSpider #insurance attacks

https://www.bleepingcomputer.com/news/security/aflac-discloses-breach-amidst-scattered-spider-insurance-attacks/