Trustwave Security Incident

Home Resources Trustwave Blog Trustwave SpiderLabs Insights, History, and Mitigations for Scattered Spider May 02, 2025 6 Minute Read The UK retail market has been thrown into turmoil in recent weeks, with three of that nation's highest-profile retailers being targeted allegedly by the well-known threat group Scattered Spider in at least one of the most disruptive incidents. Trustwave SpiderLabs has tracked Scattered Spider for more than a year and has created a detailed profile of the threat group, how it operates, its members, preferred targets, and has a long list of protective measures that an organization should have in place to help remain safe. Many of the indicators SpiderLabs has reported match the current situation impacting the UK retail sector. Background on the Recent Attacks Marks & Spencer (M&S) confirmed on April 21 that it had been attacked, with Harrods and Co-op reporting similar incidents in the following days. M&S was forced to shut down contactless payments and click-and-collect orders, as well as delaying online deliveries, according to published reports . Harrods has claimed to have stopped an intrusion attempt and is operating normally. Another attack forced food retailer Co-op to disconnect certain systems earlier this week after experiencing attempts to gain unauthorized access to some of our systems. Only the M&S attack has been attributed to Scattered Spider. However, the timing and nature of the other attacks do bear some of the hallmarks of a Scattered Spider incident. The NCSC has issued a warning to all retailers to bolster their cybersecurity defenses in light of these events, emphasizing the need for vigilance and robust incident response plans as the investigations continue to unfold. All the information below is derived from a Trustwave SpiderLabs investigation into Scattered Spider. Who is Scattered Spider? Trustwave SpiderLabs' in-depth research has found Scattered Spider, which is also known as UNC3944, Muddled Libra,...

... (truncated for display)