Cyber attacks, hacking and online crime are becoming rife in recent months. Targets have been both small and large, with individuals falling to online scams at an ever increasing number while large corporates and major infrastructures also falling victim to online attacks.
Growing cyberattacks
In the past few months the retailers M&S and Co-op became victims of online attacks which cost them millions of pounds in losses. The Co-op revealed in late September that it had seen a £200m hit to its business as a result of the cyberattack that left shelves empty and severely disrupted its supply chain [BBC].
The retailer M&S was also severely hit just weeks before and while the company said the nature of the incident meant that some personal customer data had been taken, there was no evidence that it had been shared. The financial cost to the brand has yet to be revealed but there has certainly been reputational damage. The attack saw the retailer stop taking orders on its website and app for clothing and home deliveries and also paused its in-store collection service on the 25th April. Online orders eventually resumed on the 10th of June and the click and collect service resumed in early August [BBC].
No-one was safe from these online attacks. Even the prestigious upmarket store Harrods was targeted though the firm said it managed to thwart the attempted breach to its systems [BBC / Periculo].
As the holiday season ended many people at airports across Britain and parts of Europe found themselves facing delays after hackers targeted check-in and boarding systems belonging to provider Collins Aerospace. The systems were eventually brought back online but not before thousands had their travel plans disrupted. Airlines flying out of Heathrow, Brussels, and Berlin were forced to check passengers in manually on Friday 19th September with systems not back to normal until Monday [Independent / BBC].
The same cannot be said for Jaguar Land Rover which is still facing ongoing problems after a month-long shutdown of its operations following a cyberattack [BBC].
While less disruptive, there were further reports of a ransomware attack on a nursery chain on Thursday 25th September [BBC].
Hackers said they had stolen pictures, names and addresses of around 8,000 children from the Kido nursery chain and were using the highly sensitive information to demand a ransom from the company, which has 18 sites in and around London, with more in the US and India.
Arrests
There have been arrests concerning some of these attacks. On the 10th of July the UK's National Crime Agency (NCA) announced the arrest of four individuals in connection with the cyberattacks that disrupted operations at Marks & Spencer (M&S), Co-op, and Harrods earlier this year. The suspects, a 20-year-old woman from Staffordshire, two 19-year-old men (one British, one Latvian) from London and the West Midlands, and a 17-year-old British male were detained at their residences. Authorities also seized electronic devices for forensic analysis.
The arrests were said to be linked to the hacker group known as Scattered Spider, notorious for employing sophisticated social engineering tactics, SIM swapping, and phishing techniques to infiltrate organisations. In the case of M&S, the attackers deployed ransomware, leading to a six-week shutdown of online clothing sales and an estimated £300 million loss in operating profit.
There has also been an arrest concerning the cyberattack on the airlines. On Wednesday 24th September the National Crime Agency said it had arrested a man in his 40s in West Sussex as part of an investigation into the incident affecting Collins Aerospace [Guardian].
And just days before it was reported that Thalha Jubair, 19, from east London, and Owen Flowers, 18, from Walsall in the West Midlands, were arrested at their home addresses on Tuesday by the NCA and City of London Police and charged in connection with a cyberattack that resulted in months of disruption for Transport of London [TfL].
The National Crime Agency (NCA) says it believes the hack, which began on the 31st August 2024, was carried out by members of the cyber-criminal group, Scattered Spider, and caused more than £39m in damage and disruption [BBC].
Arrests have not been confined to Britain however. An African cybercrime operation in late September saw 260 arrests after Operation Contender 3.0, involving 14 countries across the continent, reigned in a large number of scammers involved in Sextortion and Romance Scams [BBC / Interpol]
That operation should prompt concerns that even individuals are as vulnerable as large corporations.
In the coming month there is a concern that Microsoft's end of support for Windows 10 will leave millions of people around the world at risk.
The end of support means that vulnerabilities and security issues identified in Windows 10 will not be patched. While users can pay Microsoft for a year of continued support, many may simply ditch otherwise perfectly good computers and upgrade to a Windows 11 machine.
The move by Microsoft has been criticised for creating a problem with so-called eWaste as well as leaving millions of Windows 10 users potentially vulnerable to malware and cyberattacks.
There is however a reprieve for those residing in EEA countries with users able to get free Windows 10 extended security updates if they log in to Windows and enroll using a Microsoft account [Windows Central / Bleeping Computer]. The European Economic Area [EEA] consists of the 27 EU member states plus three non-EU countries: Iceland, Liechtenstein, and Norway. Britain is excluded due to its having left the EU. Another Brexit benefit!
tvnewswatch, London, UK
In the past few months the retailers M&S and Co-op became victims of online attacks which cost them millions of pounds in losses. The Co-op revealed in late September that it had seen a £200m hit to its business as a result of the cyberattack that left shelves empty and severely disrupted its supply chain [BBC].
The retailer M&S was also severely hit just weeks before and while the company said the nature of the incident meant that some personal customer data had been taken, there was no evidence that it had been shared. The financial cost to the brand has yet to be revealed but there has certainly been reputational damage. The attack saw the retailer stop taking orders on its website and app for clothing and home deliveries and also paused its in-store collection service on the 25th April. Online orders eventually resumed on the 10th of June and the click and collect service resumed in early August [BBC].
No-one was safe from these online attacks. Even the prestigious upmarket store Harrods was targeted though the firm said it managed to thwart the attempted breach to its systems [BBC / Periculo].
As the holiday season ended many people at airports across Britain and parts of Europe found themselves facing delays after hackers targeted check-in and boarding systems belonging to provider Collins Aerospace. The systems were eventually brought back online but not before thousands had their travel plans disrupted. Airlines flying out of Heathrow, Brussels, and Berlin were forced to check passengers in manually on Friday 19th September with systems not back to normal until Monday [Independent / BBC].
The same cannot be said for Jaguar Land Rover which is still facing ongoing problems after a month-long shutdown of its operations following a cyberattack [BBC].
While less disruptive, there were further reports of a ransomware attack on a nursery chain on Thursday 25th September [BBC].
Hackers said they had stolen pictures, names and addresses of around 8,000 children from the Kido nursery chain and were using the highly sensitive information to demand a ransom from the company, which has 18 sites in and around London, with more in the US and India.
Arrests
There have been arrests concerning some of these attacks. On the 10th of July the UK's National Crime Agency (NCA) announced the arrest of four individuals in connection with the cyberattacks that disrupted operations at Marks & Spencer (M&S), Co-op, and Harrods earlier this year. The suspects, a 20-year-old woman from Staffordshire, two 19-year-old men (one British, one Latvian) from London and the West Midlands, and a 17-year-old British male were detained at their residences. Authorities also seized electronic devices for forensic analysis.
The arrests were said to be linked to the hacker group known as Scattered Spider, notorious for employing sophisticated social engineering tactics, SIM swapping, and phishing techniques to infiltrate organisations. In the case of M&S, the attackers deployed ransomware, leading to a six-week shutdown of online clothing sales and an estimated £300 million loss in operating profit.
There has also been an arrest concerning the cyberattack on the airlines. On Wednesday 24th September the National Crime Agency said it had arrested a man in his 40s in West Sussex as part of an investigation into the incident affecting Collins Aerospace [Guardian].
And just days before it was reported that Thalha Jubair, 19, from east London, and Owen Flowers, 18, from Walsall in the West Midlands, were arrested at their home addresses on Tuesday by the NCA and City of London Police and charged in connection with a cyberattack that resulted in months of disruption for Transport of London [TfL].
The National Crime Agency (NCA) says it believes the hack, which began on the 31st August 2024, was carried out by members of the cyber-criminal group, Scattered Spider, and caused more than £39m in damage and disruption [BBC].
Arrests have not been confined to Britain however. An African cybercrime operation in late September saw 260 arrests after Operation Contender 3.0, involving 14 countries across the continent, reigned in a large number of scammers involved in Sextortion and Romance Scams [BBC / Interpol]
That operation should prompt concerns that even individuals are as vulnerable as large corporations.
In the coming month there is a concern that Microsoft's end of support for Windows 10 will leave millions of people around the world at risk.
The end of support means that vulnerabilities and security issues identified in Windows 10 will not be patched. While users can pay Microsoft for a year of continued support, many may simply ditch otherwise perfectly good computers and upgrade to a Windows 11 machine.
The move by Microsoft has been criticised for creating a problem with so-called eWaste as well as leaving millions of Windows 10 users potentially vulnerable to malware and cyberattacks.
There is however a reprieve for those residing in EEA countries with users able to get free Windows 10 extended security updates if they log in to Windows and enroll using a Microsoft account [Windows Central / Bleeping Computer]. The European Economic Area [EEA] consists of the 27 EU member states plus three non-EU countries: Iceland, Liechtenstein, and Norway. Britain is excluded due to its having left the EU. Another Brexit benefit!
tvnewswatch, London, UK