Experts Warn UK Companies May Be Infiltrated by Dormant Hackers Due to Rise of Ransomware-as-a-Service

Cybersecurity experts have raised alarms over a rising threat to UK businesses, warning that tens of thousands of companies may unknowingly host hackers within their networks. The warning follows recent high-profile cyberattacks on retailers like Marks & Spencer (M&S), Dior, and Harrods. While these attacks are not officially linked, experts point to a shift in the cybercrime ecosystem: the adoption of ‘ransomware-as-a-service’ by groups like DragonForce. This model allows less technically skilled individuals to rent powerful hacking tools and keep most of the profits, while the original developers retain a cut.

Dr. Harjinder Lallie from the University of Warwick and Professor Manos Panaousis from the University of Greenwich emphasized that this trend, coupled with AI-enhanced social engineering tactics, is making attacks more frequent and sophisticated. In the case of M&S, attackers stole customer data and disrupted operations, leading to a temporary shutdown of online shopping and hiring. Co-op and Harrods narrowly avoided larger breaches.

Experts stress that many businesses might already be compromised without knowing it, as hackers often remain dormant inside systems, mapping vulnerabilities before launching full-scale attacks. The combination of AI and accessible ransomware tools significantly lowers the barrier to entry for cybercriminals.