The staff said to keep cameras in meetings

The staff of the cooperative is condemned to maintain their cameras during remote work meetings and to check all the participants, because the company deals with an in progress cyber attack.

In an internal email at the 70,000 supermarket staff, funeral services and the insurance company, workers are invited to be vigilant while IT teams work to ensure that hackers are not in their systems.

“Do not register and do not transcribe team calls,” the instructions say.

He revealed Wednesday that he had closed parts of his computer systems in response to pirates who are trying to react.

It came then that the supermarkets Marks & Spencer (M&S) drew all the advertisements from his website, because he struggles with a major cyber attack.

We do not know if the hacks are linked.

Cybersecurity consultant Jen Ellis said that e-mail implies that Co-OP is concerned about the presence of pirates.

“Raising employees to keep their cameras during telephone conferences is a way to allow work to continue while ensuring that everyone is really what they claim to be, and no one unexpected participates in calls,” she told the BBC.

On Wednesday, the company said that it was taking “proactive measures” to repel the attack which, according to it, had a “small impact” on its call center and its back office.

But the internal email shows that the company has closed any remote access.

No internal application that requires a VPN (virtual private network) can be connected to the house and workers are invited to go to a cooperative location if they need to access work tools.

They are also invited not to publish sensitive information in team cats and to report suspicious messages or emails.

The internal email was reported for the first time by ITV News and confirmed by Co-OP at the BBC.

Co-op insists that the cyber attack is under control and that all the measures are “proactive”.

In the past, cyber criminals have accessed internal business messaging systems, including Uber and Rockstar games, to spy on communications and post-skill requests.

These types of tactics were used by a group called $ slips which consisted of English -speaking adolescents – two of which were arrested and sentenced to the United Kingdom in 2023.

The attack on M&S is linked to a potential spin-off of the $ lapsus known as the Spider dispersion which was responsible for high-level hacks against MGM Grand Casino and Transport for London (TFL).

As part of TFL’s response to its cyber attack, all staff members had to run for security teams in person to ensure that hackers were fully expelled from computer systems.

The incident that paralyzed M&S is a ransomware attack using the DragonForce cybercrime service.

Metropolitan police confirmed that they were examining cyber attack at M&S.

“The detectives of the cybercrime unit of the investigation,” he said in a statement.

M&S also pointed out to the National Cyber ​​Security Center (NCSC).

The BBC understands that the body urges other retailers to be vigilant, but it is not thought that retailers are a specific target.

A spokesperson for the NCSC said: “The NCSC regularly engages in a whole range of organizations on the cyber-men with which the United Kingdom is confronted and regularly reminds them of the steps they can take to be as resilient as possible.”