Step-by-step 'guides' to carrying out major cyber attacks being uploaded to YouTube
How-to video guides are being uploaded to YouTube explaining the steps to create the same software which has crippled M&S through a major cyber attack.
The video giant is one of a number of mainstream websites which publishes tutorials on how to create malware and ransomware. This is software designed to gain access to computer systems and then demand huge payments with a threat of often releasing sensitive information or crippling systems. The Mirror can reveal the group behind it - Scattered Spider, typically young hackers from Britain and America - are rapidly expanding by offering advice to other cyber criminals and then taking a cut of the profits. And they have taken tips and advice from a larger group called Dragon Force.
Advice on how to create the software to access systems and then demand something in return is available on Youtube and also medium.com - a social publishing platform. Experts fear this easily accessible advice will be used to launch other attacks. One video on Youtube has been viewed two million times and goes into detail on how to create the software needed.
It starts by saying: "We are talking about dangerous things. Malware or malicious software." Although the video makes clear it is for educational purposes, the guide says: "I encrypted, now let's hold them for ransom. Let's encrypt those suckers right now. Here we go."
The 30 minute video then goes into precise detail on how it is done. A number of people commenting say it is shocking that such detail is being posted on Youtube, even while saying it is for education. The medium.com article has six steps on how to do it.
Freelance cyber crime expert Scott Wilson said: "It's a worry that this is so freely available on Youtube. Cyber criminals could use this and those wanting to get involved in the world. This is a global crime which is causing mayhem and destroying businesses and lives. Youtube and other websites hosting these guides need to act."
Former Met Police detective Peter Bleksley said: "This is an open-invite to criminals. The criminal world is moving away from bank robberies and drug dealing and into cyber-crime. These videos are shocking. It's a disgrace."
Professor Oli Buckley, a cyber security expert at Loughborough University, said: " Marks & Spencer isn't just facing a small hiccup with one of their systems, they've been hit by the full force of a ransomware attack. Sadly, they don't usually come with quick fixes.
"It's a really stark illustration of how the real-world is underpinned by the digital domain, and if something is damaged digitally it can have knock on effects in reality. It seems like the DragonForce ransomware is at the root of the attack, with most experts pointing the finger at Scattered Spider.
He said it was easier for newer starters to get involved: "Rather than carrying out every attack themselves, they operate more like a platform: offering other cyber criminals access to their malware tools and infrastructure. In return, they take a cut of any ransom paid.
"It's a very business-like setup and, increasingly, this kind of professional approach is becoming common in the ransomware world. What makes this significant is that it lowers the barrier to entry, meaning you don't need deep technical skills to launch a sophisticated attack if you've got access to these tools."
Three retail giants have been hit by cyber attacks in the last week. Marks & Spencer, the Co-op Group and Harrods were all targets of online scammers trying to gain access to its systems.
The boss of M&S told customers they were 'working day and night' to manage the cyber attack that forced it to temporarily shut down online operations. Stuart Machin said he was 'really sorry' for the disruption to services but did not say when normal business would resume.
A spokesperson for Youtube said: 'YouTube prohibits content that promotes using or distributing malware to harm others or access secured systems. However, we may make exceptions for content aiming to educate viewers about these risks, when it does not encourage harmful malware use. This includes content from creators, security researchers, universities, and others.'
Try Our AI Features
Explore what Daily8 AI can do for you:
Comments
No comments yet...
Related Articles
BBC News
4 hours ago
- BBC News
Unmanned police helicopter tested in UK for first time
An unmanned police helicopter has been tested in the UK for the first remotely-piloted aircraft is larger than existing drones used by police forces and has a greater range and cuts National Police Air Service (NPAS) said it is not expected to replace existing helicopters, but is intended to join the fleet to carry out searches for suspects and missing Walters, NPAS head of futures and innovation, said it would help them stay airborne for longer, adding: "This capability in the future will be able to stay on task anywhere between eight and 12 hours." The Schiebel Camcopter S-100 carries the same high-powered infrared camera as standard police helicopters but can fly for up to 12 hours. It is expected to be quieter and lead to fewer noise test flights are being conducted over the Bristol Channel, in a programme funded by the Home Office and overseen by the Civil Aviation Authority and National Air Traffic Services. 'Missing people searches' Mr Walters said: "We see a blended fleet capability [in the future] where we have the mix of crewed and uncrewed aircraft."He added the current aircraft available to officers - a mix of helicopter and fixed-wing - mean they can stay in the air for between two and six said 30% of NPAS calls were to search for missing people, which the unmanned aircraft is particularly useful for."We get calls daily with a variety of different cases, from missing people, pursuits, calls around electric bikes and things like that and it's very costly to deploy our helicopters on an hourly basis," Mr Walters said."This [new helicopter] offers us an opportunity to deploy the same type of capability to provide more affordable air support whilst also still retaining our crewed aircraft for the likes of higher-speed pursuits, which those aircraft are designed for."He said the drone offered a 90% reduction in emissions per hour, compared to crewed aircraft. The new aircraft, or Unmanned Aerial System (UAS), is flown by a pilot at a ground station, supported by a police officer operating its Matt Leeding, an NPAS Tactical Flight Officer, told BBC News he had access to the same tools as an officer in the air"My job doesn't change, all we're doing is embracing the new technology, the same service, using the same equipment just on a slightly different platform," he said."There are still incidents when I'll be sitting in an aircraft at 1,500 feet (457 metres) for certain specialist operations and tasks that require a crew on the scene."The unmanned aircraft has a forward-facing camera the pilot can monitor and uses radar to detect and avoid other flights are part of programme of experimental drone trials, which include Amazon deliveries and infrastructure O'Sullivan, from the Civil Aviation Authority, told BBC News the research would lead to more unmanned aircraft in our skies."We're also working with healthcare providers to see what we can do."We're working with companies like Network Rail to look at opportunities around infrastructure surveillance," she drones are already in use with HM Coastguard and the Royal Navy, performing search and reconnaissance roles, but the unmanned police helicopter will be the first flying over residential flights are due to take place until October, but it is expected years of testing will be needed before unmanned aircraft join the NPAS fleet.
Daily Mirror
5 hours ago
- Daily Mirror
Shoppers thrilled as Marks & Spencer confirm return of 'popular feature'
After having been the victim of a cyber attack, Marks and Spencer were forced to suspend some membership perks for customers, but shoppers are excited to learn one popular perk is now back Celebrating your birthday isn't just about getting presents and cards from family and friends. Signing up to loyalty schemes and newsletters can give you access to a variety of freebies, deals and discounts from retailers to mark the big day. In order to help celebrate their customers, a lot of brands and stores offer people a birthday gift during their birthdays. This can range from a free sweet treat, to makeup, skincare or exclusive discounts. One of the many companies that used to offer their customers birthday treats is Marks and Spencer. However, this perk was stopped after the company was the victim of a cyber security attack. However, one excited shopper named Jo, known online as This Mum Cooks, recently took to TikTok to help spread the message that the supermarket chain is offering their customers the treat once more. "Marks and Spencer relaunched the free birthday gift," she excitedly revealed. She went on to explain that several membership perks, including the free birthday gift, were stopped following the shopping chain's cyber attack that happened during Easter weekend in April. The attack involved ransomware and impacted online ordering, click-and-collect and contactless payments. A Marks & Spencer online letter revealed that the compromised data comprises customer names, birth dates, residential and email addresses, phone numbers, household details and online purchase histories. In order to protect themselves and its members, several services were quickly stopped. However, while the cyber attack isn't completely resolved yet, the shopping giant has brought back some of the most missed services and perks after having restored some of its systems. This includes the popular birthday gift perk, where members get a free gift on their birthdays every year. "But what if your birthday was between the cyber attack and now?" Jo said. "Don't worry, Marks and Spencer are giving free birthday gifts to everybody in May, June and July. So if you birthday falls in one of those months, go and check your Marks and Spencer Sparks app." In a press release from 17 July, Marks and Spencer revealed that their Sparks loyalty scheme is now fully back online and will feature a range of "thank you" treats and rewards. It read: "Customers will be surprised with a range of rewards across Fashion & Home appearing in their Sparks hub. Plus, M&S ' popular Coffee Stamp scheme will soon be reinstated across M&S Café's across the UK – giving customers who have collected their six stamps a free coffee in their Sparks Hub to redeem during their next visit. "In addition, M&S will be giving out over 1.8 million birthday treats to those celebrating their birthday this month, as well as a belated birthday treat for customers who had celebrations in May or June." How to get a free birthday gift from Marks and Spencer But what if your birthday gift perk isn't in the app? There are a few things you can do. The first thing that Jo recommends is to refresh the app and make sure you have the most up to date version. Secondly, she urged people to make sure that they've entered their birthdays into the app. "Because, if your date of birth isn't there, then they don't know when to give you your birthday gift," she said. To do this, she explained: "So go into your account, into your personal details, and in there, you should have a section where you put your date of birth. "If all of those things are correct, and you are set up to receive communications from Marks and Spencer, you should be getting a free birthday gift. Anything from Percy Pigs all the way to a bottle of champagne. "So if your birthday has been recent, go take a look and let me know what you get."
The Guardian
11 hours ago
- The Guardian
Unmasked: the man behind one of the fastest growing far-right YouTube channels
The Guardian has identified the self-described 'national socialist' behind an openly extremist YouTube channel that in just over two months has accumulated 50,000 subscribers, seen more than 2.3m views, and likely made thousands of dollars from YouTube's revenue-sharing monetization program. Johnathan Christopher 'Chris' Booth, 37, lives in the unincorporated community of Coral, a part of Maple Valley Township in Michigan's Montcalm county, and is married to a senior local Republican official. Booth has published more than 70 YouTube videos since May on his Shameless Sperg account, whose graphic design elements feature stylized SS bolts. Titles of his videos – generally a recording of him delivering his views direct to camera – include: 'Why I Dislike Jews. It's not complicated', 'Black Crimes Matter: Never Relax' and 'Jews and FBI hate you and your free speech'. Typically the videos attract hundreds of comments from like-minded YouTube users. His channel has seen such remarkable success that it has drawn apparently baseless allegations from other far-right creators that he is a 'fed'. On an X account that frequently advertises his videos, his posts include antisemitic comments and in one response to a post about actor Jim Carrey he writes: 'All of them deserve rope. I advocate for national socialism though, under which idiots like this would not fare too well.' Despite YouTube's stated policies against hate speech and content that promotes violence against individuals or groups based on race, religion or other protected characteristics, Booth's channel appears to be monetized through the YouTube Partner Program. The channel displays ads and Booth has thanked subscribers for their financial support through the platform. YouTube's community guidelines explicitly prohibit content that 'promotes violence or hatred against individuals or groups based on race or ethnic origin, religion, disability, age, nationality, veteran status, sexual orientation, gender, gender identity, or other characteristic that is associated with systemic discrimination or marginalization'. A YouTube spokesperson said: 'Upon review, we terminated the channel for violating our community guidelines. Content that promotes violence or hatred against individuals or groups based on their ethnicity, nationality, race or religion is not allowed on YouTube.' According to YouTube, another account associated with Booth was terminated, and creators are no longer entitled to earn any revenue if their channel is terminated. The terminations happened after the Guardian reached out to YouTube with questions about Booth's activities. Also according to YouTube, content that promotes violence or hatred against individuals or groups based on their ethnicity, nationality, race or religion is not allowed on the platform. In the wake of the ban, Booth took to X to say that he would move his content to 'alt-tech' platforms such as Odysee. Booth is married to Meghyn 'Meg' Booth, the Republican treasurer of Maple Valley Township. Meg Booth has 'liked' several posts with extremist themes on Chris Booth's Facebook account with her personal account. Chris Booth's Facebook page also features extensive racist propaganda along with iconography often employed by neo-Nazis. The revelations raise questions about the extent to which YouTube, whose parent company Alphabet also owns Google, Waymo and other tech companies, has backslid on monitoring extremism on its platform. Jeff Tischauser, a senior research analyst at the Southern Poverty Law Center (SPLC), said Booth's operation across YouTube, X and merchandising platforms was a 'boilerplate Nazi grift'. 'He may be earning money from YouTube, as well as hawking these racist and antisemitic items on his website like cups and T-shirts,' Tischauser added. He said that YouTube is 'the premier site that these guys look to in order to expand their following and to make money off of that following'. The Guardian retrieved a Coral, Michigan, street address from EU-mandated General Product Safety Regulation compliance information on the Shameless Sperg merchandise page on the merchandising platform Printify. The property at that address is owned by Meg Booth, according to property records. Data brokers indicate that Chris Booth lives at the same address. Sites including show exterior views of the house at the property. The property's color and cladding match those visible in videos published to YouTube on 14 and 15 May. Chris Booth appears to have made some efforts to remove photographs of himself and other potentially identifying information from his own social media accounts and other online spaces. However, he is visible in 'shorts'-style videos posted by Meg Booth to Facebook. This video of Chris Booth depicts the same person visible in Shameless Sperg videos. The Guardian emailed both Chris and Meg Booth for comment. In an email, Meg Booth appeared to repudiate her husband's views. 'I am not involved in my husband's content or political views, and I do not share or support any form of racism, antisemitism, or hate speech,' she wrote, adding: 'My values are my own and are grounded in respect, inclusion, and service to the community.' Meg Booth concluded: 'As an elected official, I've always acted independently, with integrity, and in line with the expectations of my office. I respectfully decline further comment.' Chris Booth did not directly respond, but in the day after the email he took to X to reaffirm his views, including a post in which he wrote: 'I've come to believe fascists are born, not made. Discovering real fascism in my early thirties was like looking into a mirror and finally realizing why commies have called me a fascist for so long. They spotted it before I could, but then I wholeheartedly embraced it.' In his videos and on X, Booth explicitly embraces neo-Nazi ideology and promotes antisemitic conspiracy theories. On his Shameless Sperg X account, Booth writes: 'I am the Shameless Sperg, I am a National Socialist, and I do sperg rants here,' with a link to his YouTube channel. On the YouTube channel, he writes: 'This channel is a collection of sperg rants and commentary on the news & issues of the day, or whatever else is on my mind, from an autistically dissident and NS perspective.' 'Sperg', an abbreviation for Asperger syndrome, is used pejoratively in far-right circles for those whose obsessive and open extremism might put off normal people or draw unwanted attention. 'NS' is commonly used as an abbreviation for 'national socialist' in far-right circles. His videos almost all contain neo-Nazi perspectives, enunciating conspiratorial antisemitism, anti-Black racism and claims that white people are superior to all other races. In a June video titled 'There is no Anti-Semitism without Semitism', Booth states in relation to interwar Germany: 'Extreme sadism and humiliation towards Gentiles is a Jewish tradition … Now, you might begin to understand why, after 14 years of seeing their people tormented by the Jews, millions of Germans organized, gained political power and broke the chains of Jewish tyranny in Germany.' The video continues with Booth arguing that antisemitism is a just response to the behavior of Jews, and sarcastically dismisses the idea that it is 'just some ancient mental pathogen in the minds of the goyim, it just springs to life for no reason just to make things harder for the Jews'. In a July video, Booth defended recent attempts to create a whites-only community in Arkansas. He said: 'White people are allowed to congregate together without being accompanied by some fucking Black person or some Jew.' In another July video Booth said: 'Black people oppress themselves. I don't do it. I have no interest in it. I, you know, I just want them away from me. You know, I want them away from me, my community, my state, my country. I don't know. Just, I don't know, get the fuck away from me.' In a May video supporting Trump's program of allowing Afrikaner refugees into the country on the basis of a fictional 'white genocide' in South Africa, Booth said: 'You know, I'm hoping that they don't completely lose South Africa to the Black plague, but, um, but in any event, uh, things are going to fall apart for them and go shit sideways.' Tischauser, the SPLC analyst, said that the themes of Booth's videos mix 'crass racism, basic historic white power talking points' and 'pseudo-academic kind of takes on Black criminality or Black behavior'. Meg Booth, Chris Booth's wife, was in November elected as the treasurer of Maple Valley Township running as a Republican. Her public social media profile does not feature the kind of extremist messaging that Chris Booth offers on his platform, though she has interacted with posts on his Facebook account, which is also freighted with racist messaging and neo-Nazi imagery. Chris Booth also 'liked' posts in which his wife discussed her candidacy.
