
However, there are members of the Scattered Spider group still active: last year it branched out and attacked a number of other businesses, including Marks and Spencer, Co-op and Harrods – although there were other arrests following these attacks.
The group works by sending SMS phishing attacks to the mobile phones of employees of its targets. The messages purport to come from suppliers to those companies but contain links to websites set up by group members, allowing them to steal information from the employees.
However, last year the cyber criminals revealed a new line of attack — pretending to be fellow employees of the victims, tricking help desks to reveal more personal information.
