The cyberattack that has targeted Marks and Spencer (M&S) is the latest in a growing wave of cases involving something called sim-swap fraud.
While the full technical details remain under investigation, a report in the Times suggests that cyber attackers used this method to access M&S internal systems, possibly by taking control of an employee’s mobile number and convincing IT staff to reset critical login credentials.