Terrifying message sent by ‘Chinese hackers' to M&S boss after crippling cyber attack on British retailer is revealed
'CHINESE hackers' allegedly sent a terrifying message to the boss of Marks & Spencer following a crippling cyber-attack on the British retailer.
Fraudsters, believed to be from the hacking group DragonForce, are said to have emailed the company's chief executive Stuart Machin and seven other key executives.
2
High street retailer Marks & Spencer was hit by a cyber attack over the Easter holiday
Credit: Alamy
2
M&S boss Stuart Machin, pictured, along with seven other company executives were emailed by the hackers, believed to be DragonForce
Credit: PA
The message, written in broken English, was sent on April 23, indicated that M&S was hacked by the ransomware group, although the retailer has not acknowledged this.
'We have marched the ways from China all the way to the UK and have mercilessly raped your company and encrypted all the servers,' the hackers wrote, according to the BBC.
'The dragon wants to speak to you so please head over to [our darknet website].'
The link to the darknet shared in the email led to a portal for victims of DragonForce to negotiate a ransom fee.
Read More on UK News
The hackers added: 'Let's get the party started. Message us, we will make this fast and easy for us.'
DragonForce's attack during the Easter holiday has been hugely damaging for one of Britain's best-known retailer and is thought to have cost the firm an estimated £300million.
After six weeks on from the attack, the retailer is still unable to process online orders.
The email was sent to Mr Machin along with seven other top executives, according to the corporation.
Most read in The Sun
A racist term is also said to have been included in the blackmail message and also ended with an image of a fire-breathing dragon.
Along with installing ransomware in order to cripple M&S's IT system the hackers are also believed to have stolen private data from millions of customers.
The £3.50 M&S buy that'll make your whole house smell like a 'boujee candle'
Three weeks on from the attack, M&S informed customers that contact details and dates of birth from some shoppers had been obtained by a suspected cyber cartel.
M&S also admitted other personal details, including customers' order histories, had also been pilfered by online criminals.
Bosses though have stressed that no data relating to shoppers' payment, card details or account passwords had been obtained.
It is unclear how many customers have been affected by the data breach.
According to the company's full-year results, it had 9.4million active online customers in the year up to March 30.
The email apparently sent by DragonForce is thought to have bene sent using the account of an employee from IT company Tata Consultancy Services (TCS), which has provided IT services to the retailer for more than a decade.
The Indian IT worker, who is based in London, had an M&S email address but is paid employee of TCS.
Timeline of the attack
Saturday, April 19:
Initial reports emerge on social media of problems with contactless payments and click-and-collect services at M&S stores across the UK. Customers experience difficulties collecting online purchases and returning items due to system issues.
Monday, April 21:
Problems with contactless payments and click-and-collect persist.
Tuesday, April 22:
Disruptions continue.
Wednesday, April 23:
Despite earlier claims of customer-facing systems returning to normal, M&S continues to adjust operations to maintain security. Contactless payments are initially restored, but other services, including click-and-collect, remain affected.
Thursday, April 24:
Contactless payments and click-and-collect services are still unavailable. Reports surface suggesting the attackers possibly gained access to data in February.
Friday, April 25:
M&S
Monday, April 28:
M&S is still unable to process online orders. Around
Tuesday, April 29:
Information suggests that the hacker group Scattered Spider is likely behind the attack. Shoppers spot empty shelves in selected stores.
Tuesday, May 13:
M&S revealed that some
Wednesday, May 21:
The retailer said disruption from the attack is expected to continue through to July.
It's thought the worker was among the victims hacked.
The company had previously said it is investigating if it was a gateway for the cyber attack.
It has since informed the BBC the email was not sent from its system and had nothing to do with the security breach.
M&S has declined to comment on the latest revelations.
A spokesperson for the company told The Sun Online: 'We cannot comment on details of or speculation on the cyber incident, and we have been advised not to.'
Hashtags
Try Our AI Features
Explore what Daily8 AI can do for you:
Comments
No comments yet...
Related Articles
Extra.ie
14 minutes ago
- Extra.ie
Former reality star charged with murder of partner following house fire
A former reality star has been arrested and charged with the murder of her partner, who was found deceased in their home last week. Emergency services attended the scene in Port Lincoln in South Australia on Thursday afternoon following reports that a fire had broken out at the property. The accused has not yet been named due to legal reasons, but is understood to be a former contestant on reality TV show, Beauty and the Geek. A former reality star has been arrested and charged with the murder of her partner, who was found deceased in their home last week. Pic: Getty Images SA Police State Operations Service Assistant Commissioner Ian Parrot said they had not yet confirmed how long the man had been deceased, adding that it would 'form part of our investigation.' The suspect was arrested at the scene and taken to a nearby hospital where she was charged with murder, 7News report. On Monday, she faced court via phone link. She has been remanded in custody and has not applied for bail. Emergency services attended the scene in Port Lincoln in South Australia on Thursday afternoon following reports that a fire had broken out on the property. Pic: Getty Images She is set to face court again at a later date. The publication report that it is believed the woman had just recently moved into the residence with the man she is alleged to have murdered. Beauty and the Geek is an American reality TV series, which ran for five seasons from 2005. The show is marketed as the 'ultimate social experiment' and pairs beautiful women with geeky men with the pairs competing in challenges to avoid elimination. While the show is a competition, it is an experiment which allows the teams to learn from each other, with the beauties learning about car repairs, rocket science and maths and the geeks learning how to give massages; how to dance and how to get a woman's phone number. A British version of the show first aired in 2006, with the second season premiering on Discovery+ in 2022 with Kildare model Aishah Akorede winning with her partner Martin Thompson.
Irish Independent
5 hours ago
- Irish Independent
British tycoon's superyacht, Bayesian, is raised from seabed off coast of Sicily
Seven people died in the sinking last August, including billionaire Mike Lynch and his daughter, Hannah ©UK Independent Water is being pumped from a superyacht that belonged to the late British tycoon Mike Lynch, after it was seen upright for the first time since sinking off the coast of Sicily last summer. The 56-metre vessel, named Bayesian, was spotted in an upright position near the fishing town of Porticello yesterday morning, held by one of Europe's most powerful sea cranes.
The Irish Sun
9 hours ago
- The Irish Sun
Tensions in Middle East ramp up as B-2 stealth bombers leave US for possible strike on Iranian targets
TENSIONS in the Middle East ramped up further yesterday as B-2 stealth bombers left the US for a possible strike on Iran. US president Donald Trump is believed to have signed off on a hit on the rogue state's underground atomic plant at Fordow. 4 Middle East tensions rise as B-2 stealth bombers left the US for a possible strike on Iran Credit: Alamy 4 Missiles fired from Iran in retaliation for Israeli attacks Credit: Getty It came after a Trump, who said on Thursday he would decide whether to join the offensive 'within two weeks', yesterday gave Israel free rein to continue attacking its enemy Iran. Meanwhile, B-2 bombers took off from the US and were thought to be heading to the Andersen Air Force Base on the Pacific island of Guam. The powerful B-2 Spirit is the only aircraft capable of delivering the GBU-57 Massive Ordnance Penetrator bombs needed to smash Iran's atomic site at Fordow, south of READ MORE ON IRAN Waves of attacks would be needed to destroy the plant, which is encased in steel under a mountain. Iran's 86-year-old Supreme Leader Ayatollah Ali Khamenei is also said to be sheltering in a bunker as Israel targets military leaders and nuclear facilities in his country. US officials last night said no orders had yet been given to move the B-2s beyond Guam. But it ramped up more pressure on Khamenei to cut a deal — with Trump demanding Iran scrap its nuclear and ballistic missile plans. Most read in The Sun Meanwhile, a suspected spy linked to Iran was arrested amid fears he was spearheading a massive attack on UK forces in Cyprus. Sources said he was posing as a British tourist when he was detained near the RAF's Akrotiri base with a large camera with telephoto lenses. US deploys bunker-buster bomb carrying B-2 planes to new military base as Iran tensions grow He was also found to have three mobile phones when armed officers swooped on Friday. Police sources confirmed yesterday he was being held on suspicion of terror-related offences and espionage. He is suspected to have links to Iran's Islamic Revolutionary Guard Corps. Police swooped on him in the Zakaki suburb of Limassol. He has been in the country since April and is feared to have been mapping troops and jets. The Foreign Office confirmed he was a British national who is understood to be of Azerbaijani descent. 4 The apparent remains of a ballistic missile lying on the ground in northern Israel Credit: Reuters Akrotiri — where hundreds of British pilots, troops and back-up staff are based — is just 200 miles from Israel and well within range of Iran's ballistic missile arsenal. Britain and the US have been warned by Khamenei that their bases will be hit if their forces join Israel. The suspect appeared before the Limassol District Court on Friday and was remanded in custody for eight days pending inquiries. Cypriot sources said he was understood to have had the sprawling UK airbase 'under surveillance' and also watched Cyprus's own Andreas Papandreou Air Base in Paphos. Israel's foreign minister Gideon Sa'ar yesterday also claimed Iran tried to carry out an attack on Israeli citizens in Cyprus. Extra £3k in Persian MI5 jobs By Dominik Lemanski SPYMASTERS are offering £3,000 bonuses to recruit Persian speakers to tackle Iranian terror. Persian Language Specialists at MI5 and MI6 will support investigations to block Tehran-backed assassins and kidnappers. Recruits will be paid up to £44,818 with £3,000 a year extra on qualification. An advert, which is also hiring for GCHQ, reads: 'We're looking for Persian linguists for a role that goes well beyond translation and transcription. 'You will be a significant asset in helping to safeguard the UK.' In April last year, Iranian journalist Pouria Zeraati, 37, was stabbed in South West London, in an attack believed to have been ordered by Tehran. It was not known if it was linked to the Brit's arrest. Cyprus has become a transit point for stranded travellers since Israeli airspace was shut at the start of Operation Rising Lion nine days ago. Britain has upped the number of RAF Typhoons at Akrotiri and sent extra Voyager air-to-air refuellers. British and US warjets have previously helped shoot down Iranian missiles fired at Israel. But Sir Keir Starmer's government has so far kept the RAF out of the war amid fears of further escalation. Meanwhile, Israel Defence Forces' biggest scalp yesterday was terror kingpin Saeed Izadi — the financial mastermind of the Izadi, head of the Palestinian Division of Iran's Quds Force, was killed in a strike on a 'safe house' in the Iranian city of Qom. The Israeli military's Chief of General Staff Eyal Zamir said: 'Izadi was one of the key figures involved in planning and executing the October 7 massacre. The blood of thousands of Israelis is on his hands.' 4 Israel's biggest scalp yesterday was terror kingpin Saeed Izadi Credit: @IDF The Israeli military later said it killed another commander of the Guards' overseas arm, Benham Shariyari, in western Tehran. He was said to be 'responsible for weapons transfers from the Iranian regime to its proxies across the Middle East'. An 11th nuclear scientist was also assassinated at a safe house located by Israeli intelligence. Iran's foreign minister said he will not negotiate while attacks continued. But Trump hit back: 'It's very hard to make that request right now. Israel is doing well, in terms of war, and…Iran is doing less well.' But he added: 'We're ready, willing and able and we've been speaking to Iran.' Iran fired more missiles at Israel overnight which were intercepted amid reports of minimal damage. Palestine marcher in 'bottle hurl' bust By Eleanor Gunn PRO-Palestine protester was arrested after a bottle was thrown at marchers supporting Israel in London yesterday. His missile fell short but the suspect was chased down The Strand and detained, police said. Thousands of pro- Palestine demonstrators chanted 'Shame on you' as they passed a pro-Israel counter-protest on Waterloo Bridge. Later, footage emerged seeming to show a protester in a keffiyeh scarf performing a Nazi salute. Former Labour leader Jeremy Corbyn addressed crowds. He said politicians were seeking to 'turn people who protest against the invasion of Iran or the occupation of Palestine into terrorists'. Yesterday's protests came as ministers draw up plans to ban group Palestine Action under anti-terror laws. It came after two yobs from the group broke into RAF Brize Norton Oxfordshire on Friday and doused jets in paint
