{"id":1672,"date":"2025-06-19T09:25:03","date_gmt":"2025-06-19T09:25:03","guid":{"rendered":"https:\/\/www.tsfactory.com\/forums\/?p=1672"},"modified":"2025-06-19T09:25:03","modified_gmt":"2025-06-19T09:25:03","slug":"threat-group-linked-to-uk-us-retail-attacks-now-targeting-insurance-industry","status":"publish","type":"post","link":"https:\/\/www.tsfactory.com\/forums\/blog\/threat-group-linked-to-uk-us-retail-attacks-now-targeting-insurance-industry\/","title":{"rendered":"Threat group linked to UK, US retail attacks now targeting insurance industry"},"content":{"rendered":"

Hackers linked to a recent string of attacks on U.K. and U.S. retailers are now targeting the insurance industry,\u00a0according to Google researchers<\/a>.<\/p>\n

The attackers, suspected to be part of the collective known as Scattered Spider, have been targeting the retail industry since April and pivoted toward the insurance industry earlier this month, according to Google. Researchers say there are already multiple confirmed incidents at insurance companies.<\/p>\n

\u201cGoogle Threat Intelligence Group is now aware of multiple intrusions in the US which bear all the hallmarks of Scattered Spider activity,\u201d John Hultquist, chief analyst at Google Threat Intelligence Group, said in a statement. \u201cWe are now seeing incidents in the insurance industry. Given this actor\u2019s history of focusing on a sector at a time, the insurance industry should be on high alert, especially for social engineering schemes which target their help desks and call centers.\u201d<\/p>\n

There has been a \u201cwave of targeting\u201d over the past one and a half weeks, according to Hultquist.<\/p>\n

Scattered Spider has a history of targeting specific industries in clusters; researchers previously linked it to attacks on\u00a0MGM Resorts and other casino companies<\/a>. The threat collective is known to utilize sophisticated social-engineering techniques\u00a0designed to trick IT help desks<\/a>\u00a0and others into bypassing multifactor authentication or otherwise handing over credentials.<\/p>\n

Mandiant in early May\u00a0released a hardening guide<\/a>\u00a0for security teams focused on Scattered Spider\u2019s techniques.<\/p>\n

Google\u2019s disclosure that the group is targeting insurers comes as Erie Insurance investigates a suspected cyberattack that it discovered on June 7.<\/p>\n

The company said it\u00a0detected unusual activity<\/a>\u00a0and was working with law enforcement and forensic security teams to figure out the cause of a \u201cnetwork outage\u201d linked to an information-security incident.<\/p>\n

Read the Full Story Here<\/a><\/p>\n

Source: Cybersecurity Dive<\/p>\n","protected":false},"excerpt":{"rendered":"

Hackers linked to a recent string of attacks on U.K. and U.S. retailers are now targeting the insurance industry,\u00a0according to Google researchers. The attackers, suspected to be part of the collective known as Scattered Spider, have been targeting the retail industry since April and pivoted toward the insurance industry earlier this month, according to Google. […]<\/p>\n","protected":false},"author":2,"featured_media":782,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[4],"tags":[],"class_list":["post-1672","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"yoast_head":"\nThreat group linked to UK, US retail attacks now targeting insurance industry - Community<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.tsfactory.com\/forums\/blog\/threat-group-linked-to-uk-us-retail-attacks-now-targeting-insurance-industry\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Threat group linked to UK, US retail attacks now targeting insurance industry - Community\" \/>\n<meta property=\"og:description\" content=\"Hackers linked to a recent string of attacks on U.K. and U.S. retailers are now targeting the insurance industry,\u00a0according to Google researchers. The attackers, suspected to be part of the collective known as Scattered Spider, have been targeting the retail industry since April and pivoted toward the insurance industry earlier this month, according to Google. […]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.tsfactory.com\/forums\/blog\/threat-group-linked-to-uk-us-retail-attacks-now-targeting-insurance-industry\/\" \/>\n<meta property=\"og:site_name\" content=\"Community\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/TSFactoryLLC\/\" \/>\n<meta property=\"article:published_time\" content=\"2025-06-19T09:25:03+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.tsfactory.com\/forums\/wp-content\/uploads\/2021\/12\/pexels-markus-spiske-177598.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1280\" \/>\n\t<meta property=\"og:image:height\" content=\"853\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Chelsie Wyatt\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@TSFactoryLLC\" \/>\n<meta name=\"twitter:site\" content=\"@TSFactoryLLC\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Chelsie Wyatt\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.tsfactory.com\/forums\/blog\/threat-group-linked-to-uk-us-retail-attacks-now-targeting-insurance-industry\/\",\"url\":\"https:\/\/www.tsfactory.com\/forums\/blog\/threat-group-linked-to-uk-us-retail-attacks-now-targeting-insurance-industry\/\",\"name\":\"Threat group linked to UK, US retail attacks now targeting insurance industry - Community\",\"isPartOf\":{\"@id\":\"https:\/\/www.tsfactory.com\/forums\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.tsfactory.com\/forums\/blog\/threat-group-linked-to-uk-us-retail-attacks-now-targeting-insurance-industry\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/www.tsfactory.com\/forums\/blog\/threat-group-linked-to-uk-us-retail-attacks-now-targeting-insurance-industry\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.tsfactory.com\/forums\/wp-content\/uploads\/2021\/12\/pexels-markus-spiske-177598.jpg\",\"datePublished\":\"2025-06-19T09:25:03+00:00\",\"author\":{\"@id\":\"https:\/\/www.tsfactory.com\/forums\/#\/schema\/person\/9d9908f0e12559297335ebe9b601c82f\"},\"breadcrumb\":{\"@id\":\"https:\/\/www.tsfactory.com\/forums\/blog\/threat-group-linked-to-uk-us-retail-attacks-now-targeting-insurance-industry\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.tsfactory.com\/forums\/blog\/threat-group-linked-to-uk-us-retail-attacks-now-targeting-insurance-industry\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.tsfactory.com\/forums\/blog\/threat-group-linked-to-uk-us-retail-attacks-now-targeting-insurance-industry\/#primaryimage\",\"url\":\"https:\/\/www.tsfactory.com\/forums\/wp-content\/uploads\/2021\/12\/pexels-markus-spiske-177598.jpg\",\"contentUrl\":\"https:\/\/www.tsfactory.com\/forums\/wp-content\/uploads\/2021\/12\/pexels-markus-spiske-177598.jpg\",\"width\":1280,\"height\":853},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.tsfactory.com\/forums\/blog\/threat-group-linked-to-uk-us-retail-attacks-now-targeting-insurance-industry\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.tsfactory.com\/forums\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Threat group linked to UK, US retail attacks now targeting insurance industry\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.tsfactory.com\/forums\/#website\",\"url\":\"https:\/\/www.tsfactory.com\/forums\/\",\"name\":\"Community\",\"description\":\"TSFactory\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.tsfactory.com\/forums\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.tsfactory.com\/forums\/#\/schema\/person\/9d9908f0e12559297335ebe9b601c82f\",\"name\":\"Chelsie Wyatt\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.tsfactory.com\/forums\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/09ff3801fb7566acf715fe4e81a9bd942b923c236138a3ed8a8375f099e5d6d6?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/09ff3801fb7566acf715fe4e81a9bd942b923c236138a3ed8a8375f099e5d6d6?s=96&d=mm&r=g\",\"caption\":\"Chelsie Wyatt\"},\"url\":\"https:\/\/www.tsfactory.com\/forums\/blog\/author\/chelsie\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Threat group linked to UK, US retail attacks now targeting insurance industry - Community","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.tsfactory.com\/forums\/blog\/threat-group-linked-to-uk-us-retail-attacks-now-targeting-insurance-industry\/","og_locale":"en_US","og_type":"article","og_title":"Threat group linked to UK, US retail attacks now targeting insurance industry - Community","og_description":"Hackers linked to a recent string of attacks on U.K. and U.S. retailers are now targeting the insurance industry,\u00a0according to Google researchers. The attackers, suspected to be part of the collective known as Scattered Spider, have been targeting the retail industry since April and pivoted toward the insurance industry earlier this month, according to Google. […]","og_url":"https:\/\/www.tsfactory.com\/forums\/blog\/threat-group-linked-to-uk-us-retail-attacks-now-targeting-insurance-industry\/","og_site_name":"Community","article_publisher":"https:\/\/www.facebook.com\/TSFactoryLLC\/","article_published_time":"2025-06-19T09:25:03+00:00","og_image":[{"width":1280,"height":853,"url":"https:\/\/www.tsfactory.com\/forums\/wp-content\/uploads\/2021\/12\/pexels-markus-spiske-177598.jpg","type":"image\/jpeg"}],"author":"Chelsie Wyatt","twitter_card":"summary_large_image","twitter_creator":"@TSFactoryLLC","twitter_site":"@TSFactoryLLC","twitter_misc":{"Written by":"Chelsie Wyatt","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.tsfactory.com\/forums\/blog\/threat-group-linked-to-uk-us-retail-attacks-now-targeting-insurance-industry\/","url":"https:\/\/www.tsfactory.com\/forums\/blog\/threat-group-linked-to-uk-us-retail-attacks-now-targeting-insurance-industry\/","name":"Threat group linked to UK, US retail attacks now targeting insurance industry - Community","isPartOf":{"@id":"https:\/\/www.tsfactory.com\/forums\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.tsfactory.com\/forums\/blog\/threat-group-linked-to-uk-us-retail-attacks-now-targeting-insurance-industry\/#primaryimage"},"image":{"@id":"https:\/\/www.tsfactory.com\/forums\/blog\/threat-group-linked-to-uk-us-retail-attacks-now-targeting-insurance-industry\/#primaryimage"},"thumbnailUrl":"https:\/\/www.tsfactory.com\/forums\/wp-content\/uploads\/2021\/12\/pexels-markus-spiske-177598.jpg","datePublished":"2025-06-19T09:25:03+00:00","author":{"@id":"https:\/\/www.tsfactory.com\/forums\/#\/schema\/person\/9d9908f0e12559297335ebe9b601c82f"},"breadcrumb":{"@id":"https:\/\/www.tsfactory.com\/forums\/blog\/threat-group-linked-to-uk-us-retail-attacks-now-targeting-insurance-industry\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.tsfactory.com\/forums\/blog\/threat-group-linked-to-uk-us-retail-attacks-now-targeting-insurance-industry\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.tsfactory.com\/forums\/blog\/threat-group-linked-to-uk-us-retail-attacks-now-targeting-insurance-industry\/#primaryimage","url":"https:\/\/www.tsfactory.com\/forums\/wp-content\/uploads\/2021\/12\/pexels-markus-spiske-177598.jpg","contentUrl":"https:\/\/www.tsfactory.com\/forums\/wp-content\/uploads\/2021\/12\/pexels-markus-spiske-177598.jpg","width":1280,"height":853},{"@type":"BreadcrumbList","@id":"https:\/\/www.tsfactory.com\/forums\/blog\/threat-group-linked-to-uk-us-retail-attacks-now-targeting-insurance-industry\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.tsfactory.com\/forums\/"},{"@type":"ListItem","position":2,"name":"Threat group linked to UK, US retail attacks now targeting insurance industry"}]},{"@type":"WebSite","@id":"https:\/\/www.tsfactory.com\/forums\/#website","url":"https:\/\/www.tsfactory.com\/forums\/","name":"Community","description":"TSFactory","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.tsfactory.com\/forums\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/www.tsfactory.com\/forums\/#\/schema\/person\/9d9908f0e12559297335ebe9b601c82f","name":"Chelsie Wyatt","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.tsfactory.com\/forums\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/09ff3801fb7566acf715fe4e81a9bd942b923c236138a3ed8a8375f099e5d6d6?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/09ff3801fb7566acf715fe4e81a9bd942b923c236138a3ed8a8375f099e5d6d6?s=96&d=mm&r=g","caption":"Chelsie Wyatt"},"url":"https:\/\/www.tsfactory.com\/forums\/blog\/author\/chelsie\/"}]}},"_links":{"self":[{"href":"https:\/\/www.tsfactory.com\/forums\/wp-json\/wp\/v2\/posts\/1672","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.tsfactory.com\/forums\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.tsfactory.com\/forums\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.tsfactory.com\/forums\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.tsfactory.com\/forums\/wp-json\/wp\/v2\/comments?post=1672"}],"version-history":[{"count":1,"href":"https:\/\/www.tsfactory.com\/forums\/wp-json\/wp\/v2\/posts\/1672\/revisions"}],"predecessor-version":[{"id":1673,"href":"https:\/\/www.tsfactory.com\/forums\/wp-json\/wp\/v2\/posts\/1672\/revisions\/1673"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.tsfactory.com\/forums\/wp-json\/wp\/v2\/media\/782"}],"wp:attachment":[{"href":"https:\/\/www.tsfactory.com\/forums\/wp-json\/wp\/v2\/media?parent=1672"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.tsfactory.com\/forums\/wp-json\/wp\/v2\/categories?post=1672"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.tsfactory.com\/forums\/wp-json\/wp\/v2\/tags?post=1672"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}