Techno

M&S cyber attack chaos leaves more questions than answers

It has now passed more than a week of chaos for Marks and Spencer (M & S), one of the largest brands in the UK, after what is clear now – it is an important electronic attack.

It cost her millions of pounds lost sales and a lower share price.

The M&S did not say what or who expelled the online demand systems, and the delivery operations temporarily stopped Leave empty shelves in stores.

BBC was informed by security experts that Ransomwari is called Dragonfores used in the attack.

But this still leaves many unanswered questions. Beginning, why does this take a long time to solve it?

Many unrelated technical defects are unrelated to the Iber are relatively fast repairs. The cutting of the current can be resolved from a defective program or the update of the server, or even the user’s mistake, within hours.

But trying to find harmful programs and stop them sweeps the systems and causes ruin on the scale of those who are managed by a senior retail seller like the M&S, is not a quick job. Professor Alan Woodward, a cybersecurity expert from the Syrian University.

He said, “Everything is to know what has been sold, and therefore what needs to be renewed, to pay the cards payments that depends heavily on the complex systems … It will take a lot of time and experience in analysis and ensure that they are expelled from pirates,” he said.

Lisa Forte, a partner at Cyber ​​Security Red Goat.

“They deal with turmoil in a mature way, but expecting to return any company on the Internet within a week that will never happen,” she says.

“I don’t know one organization you can do.”

Many also install the nature of the threat. Multiple cyber security experts say, the more the cyberspace, the more likely they will be ransomwarries.

“I would like to suggest that there is a high level of confidence, this happened similar to the ransom,” says Dan Card, an internet expert at BCS, Carted Institute of Information Technology.

“I describe it as the digital bomb has been launched. So recovering from it is often a technical and logistical challenge … The Victims Organization is likely to work around the clock to respond and recover.”

Ransomware is a particularly bad breed of viruses, where a computer owner or network of computers is imprisoned, and their data scrambles, and attackers require fees, usually in the encrypted currency, to restore it.

Official advice is not payment. You, after all, put your confidence in criminals to be honest with their word.

But it is often impossible to restore services that are at risk without the key to infiltrators-and this means that the only way around them is to either use reserves or install new systems and start again.

The M & S will not comment, and no striker has yet passed any demands – although this does not always happen, it is often a way for online criminals to accommodate more pressure on their victims.

Dragonforce, the electronic criminal gang that we were told on Tuesday is likely to be behind the attack, allows other infiltrators to use their harmful programs for attacks that explain to get a reduction.

Regarding those who may be infiltrators: the fingers refer to a liquid network of individuals called the scattered spider (also has other pseudonyms).

It was behind the attack on MGM Las Vegas Hotels in 2023.

The web, which attracts Pinging, is a computer of “multiple sources”, which indicates that it is responsible Some of them say adolescents.

Rick Ferguson, Special Adviser to the European Electronic Crime Center in Europol, says the sources of speculation about the group’s participation seem reliable, but he adds that he has not seen any conclusive evidence yet.

I asked him if the M&S customers should be concerned about their personal information: the company itself says there is no required procedure.

“Only M & S are able to tell us whether customers should be concerned about their personal data,” he said.

“In the absence of certainty, it will definitely be recommended for the M&S customers, especially those who may have re -used data accreditation data on other web services, to start changing these passwords elsewhere.”

Related Articles

Leave a Reply

Your email address will not be published. Required fields are marked *

Back to top button