VideoThis month in security with Tony Anscombe — May 2025 edition=============================================================From a flurry of attacks targeting UK retailers to campaigns corralling end-of-life routers into botnets, it’s a wrap on another month filled with impactful cybersecurity news [](/en/our-experts/editor/ ‘Editor’) [**Editor**](/en/our-experts/editor/ ‘Editor’)30 May 2025 It’s that time of month again when ESET Chief Security Evangelist [Tony Anscombe](https://www.welivesecurity.com/en/our-experts/tony-anscombe/) offers his take on some of the most impactful cybersecurity news of the past 30 or so days. Here’s a selection of what stood out to him in May 2025:* a [warning from Google](https://cloud.google.com/blog/topics/threat-intelligence/unc3944-proactive-hardening-recommendations) that Scattered Spider, the hacking gang that orchestrated recent attacks at high-street UK retailers, is now turning their sights to US companies,* earlier in May, [Marks -& Spencer confirmed](https://www.bbc.com/news/articles/c62v34zv828o) that some customer data was stolen in the flurry of attacks on UK retailers, which had caused M-&S to stop taking online orders,* cyber-insurance provider [Coalition announced](https://www.coalitioninc.com/announcements/2025-cyber-claims-report) that business email compromise (BEC) attacks and fund transfer fraud (FTF) accounted for 60% of the claims last year while ransomware remained ‘the most costly and disruptive type of cyberattack’,* the [FBI warning](https://www.ic3.gov/CSA/2025/250507.pdf) about malware that targets end-of-life routers in a bid to corral them into a botnet,* Coinbase [expects](https://www.reuters.com/business/coinbase-says-cyber-criminals-stole-account-data-some-customers-2025-05-15/) the bill from a recent cyberattack to reach up to US$400 million.Don’t forget to check out the [April 2025 edition](https://www.welivesecurity.com/en/videos/month-security-tony-anscombe-april-2025-edition/) of Tony’s monthly security news roundup for more insights.Connect with us on [Facebook](https://www.facebook.com/eset), [X](https://x.com/ESET), [LinkedIn](https://www.linkedin.com/company/eset/) and [Instagram](https://www.instagram.com/eset/). *** ** * ** ***Let us keep youup to date—————————–Sign up for our newsletters Ukraine Crisis newsletter Regular weekly newsletter Subscribe #### Related Articles*** ** * ** ***[VideoDanabot under the microscopeVideoDanabot under the microscope](/en/videos/danabot-microscope/ ‘Danabot under the microscope’) *** ** * ** ***[VideoLumma Stealer: Down for the countVideoLumma Stealer: Down for the count](/en/videos/lumma-stealer-disruption/ ‘Lumma Stealer: Down for the count’) *** ** * ** ***[VideoThe who, where, and how of APT attacks in Q4 2024–Q1 2025VideoThe who, where, and how of APT attacks in Q4 2024–Q1 2025](/en/videos/who-where-how-apt-attacks-q4-2024-q1-2025/ ‘The who, where, and how of APT attacks in Q4 2024-Q1 2025’)  ### Similar Articles[VideoLumma Stealer: Down for the count](/en/videos/lumma-stealer-disruption/ ‘Lumma Stealer: Down for the count’)*** ** * ** ***[VideoDanabot under the microscope](/en/videos/danabot-microscope/ ‘Danabot under the microscope’)*** ** * ** ***### Share Article[](https://www.facebook.com/sharer/sharer.php?u=https://www.welivesecurity.com/en/videos/month-security-tony-anscombe-may-2025/ ‘Facebook’) [](https://www.linkedin.com/shareArticle?mini=true&url=https://www.welivesecurity.com/en/videos/month-security-tony-anscombe-may-2025/ ‘LinkedIn’) [](https://twitter.com/intent/tweet?url=https://www.welivesecurity.com/en/videos/month-security-tony-anscombe-may-2025/ ‘Twitter’) [](mailto:?&subject=I wanted you to see this site&body=https://www.welivesecurity.com/en/videos/month-security-tony-anscombe-may-2025/ ‘mail’) [](https://www.welivesecurity.com/en/videos/month-security-tony-anscombe-may-2025/ ‘copy’) ### Discussion
Related Tags:
LummaStealer
Storm-0875
Octo Tempest
NAICS: 455 – General Merchandise Retailers
NAICS: 45 – Retail Trade – Fuel
Other
NAICS: 517 – Telecommunications
NAICS: 52 – Finance And Insurance
NAICS: 518 – Computing Infrastructure Providers
Data Processing
Web Hosting
Related Services
NAICS: 523 – Securities
Commodity Contracts
Other Financial Investments And Related Activities
Associated Indicators: