Google says hackers behind UK retail cyber campaign now also targeting US

Google Threat Intelligence Group warns that the criminal group tracked as Scattered Spider (UNC3944) — known for social engineering and SIM‑swapping and previously linked to high‑profile ransomware incidents — is targeting U.S. retail firms with ransomware/extortion (DragonForce). The group has historically focused on single sectors, leveraged third‑party compromises, and shown capability to circumvent mature security programs, prompting U.S. retailers to increase vigilance.