The retail sector is increasingly targeted by adversaries, with 79 of 255+ tracked groups focusing on it. It ranked as the fourth most attacked industry by interactive intrusions in 2024, with a 55% year-over-year increase, while access broker ads surged 313%. Attackers exploit valid credentials, conduct hands-on-keyboard attacks, and use cross-domain tradecraft to persist and exfiltrate data. Key adversaries include PUNK SPIDER, behind Akira ransomware and data-leak extortion; RECESS SPIDER, operators of PLAY ransomware using OWASSRF exploits; and SCATTERED SPIDER, which targets IT staff through social engineering to compromise accounts and enable lateral movement.

Join for free to read