Marks and Spencer (M&S) confirmed that customer data was stolen during a ransomware attack conducted by an affiliate of the criminal organization DragonForce. The stolen data includes email addresses, personal information, and “masked” payment card details. The CEO of M&S, Stuart Machin, stated that the data has not been shared, and doesn’t include usable card or payment details. M&S has advised customers to reset their passwords as a precaution.

How cybercriminals use humour to spread malware
Cybercriminals are increasingly utilising viral memes and content as a tool to bypass traditional defences and infect devices, with embedded malicious code or hidden instructions