<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Helpdesk on Locodigital</title><link>https://locodigital.com.br/en/tags/helpdesk/</link><description>Recent content in Helpdesk on Locodigital</description><generator>Hugo</generator><language>en-US</language><lastBuildDate>Tue, 02 Jun 2026 09:00:00 -0300</lastBuildDate><atom:link href="https://locodigital.com.br/en/tags/helpdesk/index.xml" rel="self" type="application/rss+xml"/><item><title>DragonForce ransomware: the cartel that took down M&amp;S and Co-op</title><link>https://locodigital.com.br/en/technology/dragonforce-the-ransomware-cartel-behind-the-m-and-s-attack/</link><pubDate>Tue, 02 Jun 2026 09:00:00 -0300</pubDate><guid>https://locodigital.com.br/en/technology/dragonforce-the-ransomware-cartel-behind-the-m-and-s-attack/</guid><description>&lt;p&gt;Marks &amp; Spencer lost more than £500 million in market value after somebody rang the company's IT helpdesk pretending to be an employee. No zero-day, no elaborate phishing. One phone call, one password reset, and two months later the e-commerce systems of one of the UK's largest retail chains were encrypted. That's DragonForce.&lt;/p&gt;
&lt;h2&gt;Who DragonForce are&lt;/h2&gt;
&lt;p&gt;DragonForce emerged in 2023 as a Malaysian hacktivist group, but pivoted quickly to ransomware-as-a-service (RaaS), adopting an affiliate model with a split of up to &lt;strong&gt;80% of the ransom&lt;/strong&gt;. In March 2025 it went further: it relaunched the operation as a &lt;strong&gt;"ransomware cartel"&lt;/strong&gt;, letting affiliates create their own brands using the group's infrastructure, encryptor and tooling — their own name, their own leak site, their own visual identity.&lt;/p&gt;</description></item></channel></rss>