Hackers Targeting U.S. Retailers After UK Attacks, Google Warns

Google has issued a warning that the same cybercriminals responsible for major digital disruptions in the United Kingdom are now setting their sights on retail companies in the United States. 

According to a statement from John Hultquist, an analyst at Google’s cybersecurity division, these hackers “are aggressive, creative, and particularly effective at circumventing mature security programs.”

The attacks are believed to originate from a group associated with “Scattered Spider,” a loosely linked collective of cyber attackers with differing levels of technical skill. 

The group recently made headlines for allegedly crippling the digital operations of Marks & Spencer (M&S), one of the UK’s most prominent retailers, since April 25.

Check this out: Sony Projects Stagnant Profits as Tariff Costs Mount

Retail Sector Faces Prolonged Threat

Hultquist noted that the group often concentrates on one industry at a time, suggesting that retailers could remain targets for the foreseeable future. Their history includes high-profile breaches on both sides of the Atlantic, with significant attacks in 2023 on casino giants MGM Resorts International and Caesars Entertainment.

Efforts to clamp down on the group have been hampered by several challenges, including their fluid structure, the young age of many members, and limited cooperation from victims of cybercrime. 

These obstacles have made it difficult for law enforcement agencies to mount effective responses, according to previous Reuters reporting.

When asked for comment, the FBI and the Cybersecurity and Infrastructure Security Agency—America’s lead civilian cyber defense agency—did not respond.

Christian Beckner, a senior official at the National Retail Federation, confirmed that U.S. retail firms are actively monitoring the situation. “We’ve been closely tracking everything going on in the UK over the past few weeks,” he said. “There aren’t geographic boundaries on these threats.”

Meanwhile, the Retail & Hospitality Information Sharing and Analysis Center (RH-ISAC), whose members include major brands such as Costco, McDonald’s, Albertsons, and Lowe’s, has partnered with Google to prepare an informational briefing for retailers.

Continue reading: Cybersecurity News