Skip to main content

DS Risk Warning: Cyber Critical Update

 

Critical Update



With thanks to our NPs the S W Cyber Resilience Centre, we bring you their updated advice. Please pay close attention to it, regardless that it flows from the attacks on the retail sector. The approach taken can be applied anywhere!


The National Cyber Security Centre (NCSC) has issued a critical warning following a wave of cyber attacks on major UK retailers including M&S, Co-op and Harrods. These incidents appear to involve criminals impersonating IT help desks to trick staff into revealing login credentials, a technique known as social engineering.

 

We’re issuing this urgent message to all SWCRC members to raise awareness and encourage immediate action.

 

What’s happening?

 

A group calling itself DragonForce has contacted the BBC to claim responsibility for recent breaches. Their tactics include:

       •     Phoning IT staff pretending to be locked-out employees

      •     Calling or messaging staff pretending to be from internal IT help desks

      •     Using fluent English and credible scenarios to gain trust

 

The NCSC believes these attacks resemble those carried out by the notorious “Scattered Spider” group, known for targeting senior staff to gain access to sensitive systems.

 

What should you do now?

 

We recommend the following immediate steps: 

🔐 Review your password reset procedures, especially for senior roles

📞 Introduce internal codewords or other identity checks for staff requesting credential changes

🧠 Reinforce awareness among staff of social engineering tactics

📊 Monitor for unusual login activity, such as logins at odd times or from unexpected locations

 

Further official advice is available here: NCSC Guidance

 

This is a timely reminder that no organisation is too small to be a target – simple procedural improvements can make a huge difference in resilience.


The Cyber Resilience Centre for the South West is excited to be working in partnership with you and your organisation to make the South West region a safer place to live, work and do business.



Comments

Popular posts from this blog

DS Risk Warning: Health - Coronavirus/Covid 19

Hello all, You may well have already heard or seen that as a result of the Government's meeting today on this issue they have moved to a different level of response to the virus and its progress namely DELAY. After reading the following and reflecting on it you may come to the conclusion a communication to all staff and another to parent/carers would be timely, as soon as possible, to try to stave off issues on site tomorrow morning. With immediate effect the advice is that anyone with a new persistent cough or high temperature should self-isolate for seven days. From Friday, school trips abroad will be banned. This should trigger the ability to claim from your insurers but there's no compensation for the disappointment and lost opportunity, of course. Older people and those with pre-existing health conditions are being told not to go on cruises. PM Boris Johnson said it was "the worst public health crisis for a generation".   He said there was no...

Delegated Services Risk Warning: Weather; Snow and Ice

Hello all, On the basis of the current forecast projection, coming to a conclusion on business as usual on Friday is very difficult to call. You'll see from the risk matrix below and description that things are moving in the higher impact direction for snow on the way home and overnight on Thursday, with things easing in the early hours and into the morning. However, there's still the caveat that a lot of it could be rain! If snow, the description may mean that it will be possible to have motorways and the majority of principal gritted routes open and, therefore, public transport running for the journey to work. My call at the moment is that it looks like an early curtain open and radio on for Friday morning to see what we face. It could vary markedly across the staff team's travel to work area. Make sure your communication cascade to all method is ready, up to date and has capacity if many have to use it. It may be a 'we are open' on a rolling basis will ...

DS Risk Warning: Health - Cornavirus/Covid 19

Priority Wed, 26 Feb, 20 Hello all, Looking at how things are progressing and supporting you with your many enquiries can we suggest, if you haven't done so already, a communication to your community and staff? The content would be to reassure that you are following the national and local advice. You could then copy and paste the advice from yesterday that includes the list of Category 1 and Category 2 locations and the list of Italian lock down villages. If you can you can go on to say nobody has returned from lock down areas anywhere in the world. Some have returned from areas where the advice is clear on being vigilant in case symptoms appear. If that were to be the case they will then follow the self isolate advice, etc. it would be sensible to recognise that the situation is very dynamic and could already be changing as you send your communication. You will update them on your position if anything material changes, but they can also keep up to date ...