The Week The Week
flag of US
US
flag of UK
UK
https://cdn.mos.cms.futurecdn.net/flexiimages/jacafc5zvs1692883516.jpg

SUBSCRIBE & SAVE

Less than $3 per week

Sign in
  • View Profile
  • Sign out
  • The Explainer
  • Talking Points
  • The Week Recommends
  • Newsletters
  • Cartoons
  • From the Magazine
  • The Week Junior
  • More
    • Politics
    • World News
    • Business
    • Health
    • Science
    • Food & Drink
    • Travel
    • Culture
    • History
    • Personal Finance
    • Puzzles
    • Photos
    • The Blend
    • All Categories
  • Newsletter sign up Newsletter
  • Saturday Wrap, from The Week
    A Trumpian rebel, a fall from grace, and a hacking epidemic

     
    briefing of the week

    The hacking epidemic

    The number of “ransomware” cyberattacks on British companies is large and growing

    Who has been hacked?
    On 31 August, Jaguar Land Rover (JLR) noticed an attack on its computer systems. JLR – which employs 32,800 people and supports another 104,000 jobs through its supply chain, mostly in the West Midlands – had to close its factories for over a month. It is estimated that the attack will cost some £1.9 billion. JLR is only the latest victim in a string of ransomware attacks. In the UK alone, Marks & Spencer, the Co-op Group, Harrods, Heathrow Airport, Transport for London and the British Library have all had their operations disrupted in the past two years. According to GCHQ’s National Cyber Security Centre (NCSC), “highly significant” attacks rose by 50% in the past year, with 18 incidents affecting the Government, essential services, the economy or a large number of people.

    Why is this happening?
    Because we’ve built a world that is entirely dependent on a set of technologies which are intrinsically insecure and ultra-complex, and which few people understand. The internet is designed to be easy to access, which of course makes it vulnerable; it suffered its first big hack attack in 1988, when few people had even heard of it. The more that organisations rely on networked computer technology, the more they’re vulnerable to attack and extortion. Manufacturing and logistics, such as JLR’s, grind to a halt when the systems go down. Hospitals, law firms and other institutions where privacy is paramount can be threatened with data leaks.

    How do these hacks work? 
    There are various ways of invading or disabling a network. Hackers can gain access directly via software vulnerabilities; they can hack lots of unprotected computers and use them as a sort of zombie army, known as a “botnet”, to overwhelm a network. At present, we are seeing a spate of ransomware attacks. The first step is to get into a network, usually by impersonating an employee. This often involves “phishing” emails, or other inventive forms of manipulation known as “social engineering”: in 2023, hackers combed LinkedIn for MGM Resorts employees with high-level system access, then called an MGM helpdesk posing as one of them and asked for a password reset, which got them in. Once inside, they extend their access, steal sensitive data for extortion purposes and, where they can, take control. A favoured current target is the “hypervisor”, a server computer that allows many remote machines to use one system (as when employees work from home). Then they use ransomware to encrypt its data, rendering the whole system unusable and making it impossible to recover without paying the hackers for a decryption key.

    Why has the problem got worse? 
    One reason is the huge growth in cryptocurrencies, which make money safer to receive and launder – a record $1.1 billion (£825 million) is thought to have been paid out globally in 2023. They also make it easier to buy illegal services on the dark web. The presence of groups offering “ransomware as a service” (RaaS) – currently the most popular business model – have greatly lowered barriers to entry for criminal hackers.

    What is ransomware as a service?
    RaaS groups – which advertise on the dark web, with names such as Hive, DarkSide, REvil and LockBit – sell tech support services for ransomware attacks. For a monthly subscription, or a share of the take, they’ll provide encryption software, a payment portal and a dedicated leak site for threatening the victim further, as well as help with the negotiations. Some are picky about who they’ll hack; LockBit apologised and offered free decryption when one of its affiliates attacked a children’s hospital in Toronto in 2022. This may only be good business sense. DarkSide collapsed as a brand because of the law-enforcement attention it attracted by hacking the Colonial Pipeline, which supplies the east coast of the US with 45% of its fuel, in 2021.

    Who are the hacking groups? 
    The perpetrators range from loose-knit bands of individuals to professionally structured illegal businesses. In the past, many have been in the former Soviet Union and eastern Europe. A Russian-speaking group known as Wizard Spider paid its employees salaries and commission; Evil Corp, another Russian hacking group, offered holiday pay, sick leave and more. Some groups have documented ties to Russian security services; Iran and North Korea appear to sponsor others. But most cybercriminals are motivated by profit, and can come from almost anywhere. Many of the recent attacks on UK companies – including the Co-op, M&S and JLR – have been traced to, or claimed by, a loose, English-speaking group known as Scattered Spider or Scattered Lapsus$ Hunters. They are known for their exploitation of human vulnerabilities, and for their stunning speed in taking over a network once they have invaded it.

    Why can’t they be stopped? 
    Hackers pose all sorts of problems for law enforcement. Groups are often based abroad in uncooperative jurisdictions, though pressure can be applied: four days after an angry call from Joe Biden to Vladimir Putin in 2021, REvil vanished. Even if based at home, though, groups usually have decentralised, evolving structures that make them difficult to track and stop. Members operate under aliases, using software to disguise their location. The best way to deter such attacks is through boring but essential measures: installing software security updates; using multi-factor authentication for signing in. The NCSC thinks most ransomware victims aren’t specifically targeted; they just had a vulnerability that was noticed by hackers in a bulk search. Cyber-insurance now seems a necessity. Some smaller companies, like the Kettering haulage group KNP, have had to close because of hacks.

    Scattered spiders
    Many recent ransomware attacks are the work of closely linked, overlapping groups known variously as Scattered Spider, Scattered Lapsus$ Hunters and ShinyHunters, among other names. They stem from a large underground network that calls itself “The Community” or “The Com”, based largely in the US, the UK and Canada. Many members came into contact with each other as gamers, playing online games such as “Minecraft”, particularly among “griefing” circles. Griefers deliberately disrupt and “troll” other players. Members of The Com then graduated to cybercrimes: such as cryptocurrency theft and online grooming.

    The security company Darktrace describes Scattered Lapsus$ Hunters as “English-speaking, aged 16 to 21, and a little bit neurodiverse”. Paul Foster of the National Crime Agency thinks “Covid probably accelerated their development: more time online, more time on devices”. The groups plan their attacks through invite-only groups on Telegram, an encrypted messaging service, and other sites. Their British and US accents make it easier for them to fool IT helpdesks. Law enforcement can eventually catch up with them: a series of men in their teens and early 20s, from Florida to Walsall, London to Las Vegas, have been arrested.

     
     
    controversy of the week

    Greene’s rebellion: a Maga hardliner turns against Trump

    We live in strange times, said Holly Hudson on The Daily Beast. Who’d have thought, for instance, that the day would come when Marjorie Taylor Greene began “sounding… kind of reasonable”? The Georgia congresswoman has until now been best known as a conservative firebrand and conspiracy loon. She famously suggested that wildfires might have been started by “Jewish space lasers”, and railed against the “Gazpacho police” (she meant “Gestapo”). Over recent weeks, however, this once-staunch Trump loyalist has started taking the administration to task. She has blamed Republican leaders for the government shutdown; sided with Democrats in calling for an extension of tax credits for health insurance; railed against high inflation; and stated that her party has “no plan”. Greene’s independent streak has not gone unnoticed by Trump, who has apparently been calling around and asking: “What’s been going on with Marjorie?”

    Trump is right to ask, said Melanie Zanona on NBC News, as Greene is “arguably more in tune with the Maga base than any other member of Congress”. Her attacks may, in fact, be partly motivated by pique: sources say she’s cross that the White House talked her out of running for the Senate, and is disappointed not to have been given a cabinet role. But there’s also political calculation at work, said Rex Huppke in USA Today. Greene is positioning herself for the post-Trump era. She can see that the president’s popularity is sliding and that the economy is not working well for most Americans. She’s a “gifted grifter dipping a toe in the pool of Trump defiance to see if it makes waves she can ride”.

    Greene’s rebellion is a warning to the Republicans, said Matt Wylie in The State. “She’s not going rogue; she’s echoing the frustrations she’s hearing from her own base.” Trump keeps insisting that prices are falling, yet it’s clear his trade tariffs are hitting people in the pocket. Grocery bills are rising; pay cheques are shrinking. Some voters, meanwhile, are unhappy about Trump launching legal assaults on his political enemies and deploying troops in cities. “Economic pain, institutional mistrust and political exhaustion are converging into something volatile – a storm of disillusionment that no amount of populist rhetoric can overcome.” The GOP needs to start governing more effectively, or “the cracks in the Maga movement will only widen”.

     
     

    Spirit of the age

    Club and Penguin, two of Britain’s classic biscuits, have reduced their cocoa content so much that they can no longer be legally described as chocolate. The brands, made by McVitie’s, have been reformulated, and the coating for both has been downgraded to “chocolate flavour”. Club’s famous slogan, “If you like a lot of chocolate on your biscuit, join our Club,” has been replaced with: “If you like a lot of biscuit in your break, join our Club.”

     
     
    Viewpoint

    Phrases to avoid

    “Almost any derivative for the word husband makes me want to move to the Moon. ‘Hubby’ for instance, or ‘the hubster’. Should you even be allowed to get married if you think hubster is an acceptable word to refer to an adult man? Likewise, ‘wifey’. While we’re in this area, could we have a moratorium on ‘mama bear’ and ‘papa bear’, unless you’re at the zoo, or in the Rockies. Those who refer to their dogs as ‘furbabies’ should also be discouraged. Are you going anywhere nice for your holibobs? Find another hairdresser, if that’s their line of enquiry. And since it’s looming, a few may need reminding that ‘Chrimbo’ is unforgivable.”

    Sophia Money-Coutts in The Telegraph

     
     
    talking point

    Prince Andrew: a sordid fall from grace

    It came years too late, but last week, Prince Andrew finally accepted that his “rancid” reputation had become a threat to the monarchy, said the Daily Mail. Having stepped away from royal duties in 2019, he released a statement confirming he was now “voluntarily” relinquishing all the titles conferred on him, including his dukedom and his status as a Knight of the Garter. The Palace – reeling from fresh revelations about the prince’s involvement with the late sex trafficker Jeffrey Epstein, and further reports of Andrew’s ties to suspected Chinese spies – let it be known that he would no longer be attending family Christmases at Sandringham.

    In his somewhat “bullish” statement, Andrew tried to frame the loss of his titles as his own decision, said Hannah Furness in The Telegraph; but of course, it wasn’t. He was forced into it by a King whose patience had snapped, in the wake of a slew of toxic headlines that had threatened to overshadow his historic visit to the Vatican this week. The reports that Andrew had met, at least three times, the Beijing official at the heart of the Westminster spy case were bad enough, said The Times. Even worse was evidence that Andrew had lied about his contacts with Epstein. In his disastrous Newsnight interview in 2019, he insisted that he had cut Epstein off in December 2010 (when they were photographed together in Central Park). Yet it emerged last weekend that 12 weeks later, he’d sent the convicted paedophile an email, saying they were “in this together”, and would “play some more soon!!!!”.

    A day before Andrew sent that email, said The Mail on Sunday, the press had published the now-notorious photograph of him with Epstein victim Virginia Giuffre, then 17. Andrew says he does not recall ever meeting her, and that the photo is fake. Yet we know now what he said to Epstein in response to the surfacing of that photo, said Jan Moir in the Daily Mail; and it doesn’t boost his case. Nor does the content of Giuffre’s memoir “Nobody’s Girl”, published posthumously this week. It paints a distressing portrait of a vulnerable girl, repeatedly raped as a child, then manipulated, abused and exploited by Epstein and Ghislaine Maxwell – who were not so much partners, Giuffre says, but “two halves of a wicked whole”. When they allegedly served her up to Andrew, in 2001, he was asked to guess her age. She says that he correctly surmised that she was 17, then told her that his daughters were only a bit younger than her. That didn’t stop him having sex with her, the book says (the Prince denies it): he viewed it as “his birthright”. Allegedly they had sex on two more occasions, once with multiple girls. How can he live with himself? The least Andrew could do now, said Libby Purves in The Times, would be to reveal what he knows about Epstein’s sordid world. That way, he might just win back a shred of public respect. Instead, he carries on dismissing Giuffre as a liar.

    Andrew has brought shame on his family for so long, it is hard to remember that he was once the “golden boy”, said Kate Mansey in The Times – the dashing naval helicopter pilot who served in the Falklands War. But that reputation did not last. An early official visit to the US turned into a PR disaster when he grabbed a paint sprayer and turned it on the press pack. He thought it was funny. The tabloids dubbed him Randy Andy, for his many girlfriends; later, his fondness for going on lavish, publicly funded foreign trips as a UK trade ambassador earned him the nickname Air Miles Andy. In 2011, he was forced to step down from that role, owing to concern about the many gifts he had received and the dubious contacts he had made. They included Epstein, but also the likes of Saif Gaddafi, the son of the Libyan dictator Colonel Gaddafi.

    The royal family is culpable, said Kevin Maguire in the Daily Mirror. If they were really horrified by the charges against Andrew, they’d have cut him off years ago. Instead, the late Queen reportedly helped him pay £12 million to keep Giuffre’s story out of court. They hoped that getting him to relinquish his titles would finally draw a line under the matter – but it’s not going away. Police are looking into reports that Andrew had Giuffre’s social security number, and asked his protection officer to dig for dirt on her; more damaging emails may yet emerge from the Epstein files in the US. Moreover, to an angry public, Andrew doesn’t look disgraced. He is still living in his 30-room mansion in Windsor, with its 98 acres of private grounds. Having spent around £8 million on repairs when he moved in, he pays no rent and his lease lasts until 2078. And he is still a prince, for goodness sake. He could, in theory, be stripped of that title, said Anne McElvoy in The i Paper. Prince William – who has hinted that he’ll have a very different, modernised monarchy – is said to have argued for his uncle to be treated more brutally. But the King, who is in fragile health, will have perceived that there is a danger in pushing Andrew too far. If the Prince feels he has nothing left to lose, who knows what he might do or say.

     
     

    It wasn’t all bad

    A quick-thinking three-year-old helped to save his mother’s life after she suffered a severe epileptic seizure, by unlocking her phone and calling a neighbour for help. Shantell Woods said she was cooking at her Michigan home when she fell unconscious. Having seen such episodes before, her son Cody grabbed her phone, held it in front of her face to open the device, and called a neighbour, saying “Help Mommy, help Mommy!”; the neighbour then rang emergency services. “I could have been gone,” said Woods. “He’s my superhero.”

     
     
    People

    Malala Yousafzai

    After Malala Yousafzai was shot in the head by the Taliban in 2012, she made a remarkable recovery, resettling in Birmingham with her family and eventually winning a place at Oxford, said Sirin Kale in The Guardian. But her time at the university was far from straightforward.

    As the breadwinner not only for her parents and two brothers, but also for her extended family back in Pakistan – at one point she was even paying for two family friends to attend college in the US and Canada – she had to balance her studies with taking on paid speaking events, to keep everyone dependent on her afloat. In her first-year exams, she got a 2:2 and had to seek additional help from tutors; when she was home, she says, her father would treat their house like “an art museum”, wheeling her out to admiring visitors “like the signature piece in the collection”.

    Her mental health then took a dive when, one night in Oxford, she took some puffs of cannabis from a bong. Suddenly, memories of the Taliban attack – which she had long repressed – started replaying in her mind on a loop: the gunshot, the blood spray, the crowds. “I thought nothing could scare me, nothing,” she says. “And then I was scared of small things, and that just broke me. But, you know, in this journey I realised what it means to be actually brave. When you can not only fight the real threats out there, but fight within.”

     
     

    Image credits, from top:  Andrew Harnik / Getty Images; Adam Vaughan /EPA / Bloomberg / Getty Images; Peter Nicholls / Getty Images; Todd Owyoung / NBC / Getty Images
     

    Recent editions

    • Morning Report

      The NBA’s gambling problem

    • Evening Review

      Washington’s ‘Arc de Trump’

    • Morning Report

      Trump’s drug war spreads west

    VIEW ALL
    TheWeek
    • About Us
    • Contact Future's experts
    • Terms and Conditions
    • Privacy Policy
    • Cookie Policy
    • Advertise With Us
    • FAQ
    Add as a preferred source on Google

    The Week is part of Future US Inc, an international media group and leading digital publisher. Visit our corporate site.

    © Future US, Inc. Full 7th Floor, 130 West 42nd Street, New York, NY 10036.