Hackers behind UK retail attacks now targeting US companies

Google and reporting indicate that the Scattered Spider collective (also tracked as UNC3944 and linked to DragonForce ransomware) has been conducting targeted ransomware and extortion campaigns against retail chains in the UK and is now also targeting US retailers; the group uses sophisticated social-engineering tactics (phishing, SIM swapping, MFA fatigue) and has been tied to multiple high-profile breaches and data thefts, prompting guidance and investigation from the UK NCSC.