M&S CONFIRMS SOCIAL ENGINEERING LED TO MASSIVE RANSOMWARE ATTACK

Summary from the TLDR InfoSec newsletter

M&S revealed that cybercriminals used advanced social engineering tactics to impersonate an employee and manipulate Tata Consultancy Services into resetting a password, resulting in a DragonForce ransomware attack that encrypted VMware ESXi servers and exfiltrated around 150GB of data, though the company declined to confirm if the ransom was paid.