Thu, 01 May 2025

Thu, 01 May 2025 Co-op cyber attack: Staff told to keep cameras on in meetings

Experts say the instruction suggests the company fears hackers could be lurking on calls.
Co-op is taking measures to prevent hackers from accessing its systems after discovering an ongoing cyber attack. The company has ordered staff to keep their cameras on during remote work meetings and verify all attendees to ensure no unauthorized individuals are participating. An internal email to employees also warns them not to record or transcribe Teams calls, indicating that the company may be concerned about hackers infiltrating their systems. The cyber attack has had a "small impact" on Co-op's call centre and back office, but the company is taking proactive measures to prevent further damage. To do this, they have shut off all remote access, requiring employees to visit a Co-op location if they need to use work tools. They are also advising staff not to post sensitive information in Teams chats and to report any suspicious messages or emails. Co-op insists that the cyber attack is under control, but experts warn that hackers may be using tactics similar to those used by Lapsus$, a group known for accessing internal messaging systems of companies like Uber and Rockstar Games. The attack against M&S, another major UK retailer, has been linked to a potential spin-off from Lapsus$ called Scattered Spider. The National Cyber Security Centre (NCSC) is urging retailers to be vigilant but says it's not clear whether retailers are a specific target of the hackers. The regulator is also considering measures to limit vet bills and protect food availability in supermarkets, which may be affected by the cyber attack.
  >>