Google Issues Cybersecurity Alert to US Retailers, Says Hackers Who Paralyzed UK Counterparts Now Targeting American Stores

Tech titan Google is warning US retailers about cybersecurity attacks after hackers disrupted UK businesses.

John Hultquist, an analyst at Google’s cybersecurity arm, says that US retailers are now facing cyberattacks involving ransomware and extortion tactics, similar to what UK businesses have just been contending with.

“Shields up US retailers. They’re here.”

Hultquist says the hackers are likely connected to a group known as Scattered Spider, or UNC3944.

Says Google in a blog post,

“Recent public reporting has suggested that threat actors used tactics consistent with Scattered Spider to target a UK retail organization and deploy DragonForce ransomware. Subsequent reporting by BBC News indicates that actors associated with DragonForce claimed responsibility for attempted attacks at multiple UK retailers.”

According to Google, Scattered Spider initially targeted telecommunications-related companies to engage in SIM swap scams but has since expanded its tactics.

“After shifting to ransomware and data theft extortion in early 2023, they impacted organizations in a broader range of industries. Since then, we have regularly observed UNC3944 conduct waves of targeting against a specific sector, such as financial services organizations in late 2023 and food services in May 2024. Notably, UNC3944 has also previously targeted prominent brands, possibly in an attempt to gain prestige and increased attention by news media.”

Generated Image: Midjourney