Scattered Spider Linked to Marks & Spencer Hack

Retailer Continues to Recover From Ransomware Incident Akshaya Asokan (asokan_akshaya) • May 1, 2025

British retailer Marks & Spencer was reportedly targeted by financial crime group Scattered Spider, who deployed ransomware on the company's VMware ESXi server.

See Also: Demostración Del Producto: Backup Y Recuperación De VM

The retailer continues to recover from a cyber incident that disrupted operations in its online and offline stores. Security experts told the BBC that the DragonForce ransomware group was behind the attack.

DragonForce emerged in August 2023 as a traditional ransomware-as-a-service group but earlier this year announced a shift under which it provides infrastructure and tools such ransom negotiation but allows hackers to hack under their own brand and use whatever malicious encrypter they want, Sophos reported on April 23.

Citing unidentified industry sources, BleepingComputer reported Monday that attack has the hallmarks of an operation conducted by members of the ...