MGM Resorts Reports A "Cyber-Security Issue"

[plat]

Content source

https://techcrunch.com/2023/09/11/mgm-resorts-cybersecurity-issue-outage/

Uh oh. Spaghetti-O

A source with knowledge of the incident told TechCrunch that all of MGM’s properties, including those outside of Las Vegas, appear to be affected by the incident. The websites of several of MGM’s regional resorts, including MGM Springfield in Massachusetts, MGM National Harbor and the Empire City Casino in New York, were all offline at the time of writing.

X source vx-underground was a little more blunt (this is a snip of the tweet):

Spoiler

 

[vtqhtr413]

MGM Resorts last experienced a significant cybersecurity incident last year when the personal information of more than 140 million guests was shared on Telegram. The stolen data included guests’ full names, postal addresses, email addresses, phone numbers, dates of birth and, in some cases, passport and driver license numbers.

Couldn't happen to a better bunch.

 

[cartaphilus]

Uh oh. Spaghetti-O



X source vx-underground was a little more blunt (this is a snip of the tweet):

Spoiler

View attachment 278558

Somebody somewhere in Vegas is now running bets on when will the system become operational again.

They should have used a Skynet defense system and they wouldn't have this problem. (get AI hooked into gambling)

 

[vtqhtr413]

Caesars Entertainment reportedly paid "tens of millions of dollars" to hackers who threatened to release company data, Bloomberg has reported. The attack was reportedly perpetrated by a group called Scattered Spider (aka UNC 3944), a group skilled at using social engineering to bypass corporate network security. It's the second notable attack of a Las Vegas casino group, following a hack that caused a cyber outage at MGM Resorts.

Members of the hacking group are reportedly located in the US and UK and are as young as 19 years old. They began targeting Caesars as early as August 27th, and obtained access to an outside vendor before entering the company's network, according to the report. Caesars is expected to disclose the attack "imminently" in a regulatory filing.

Caesars reportedly paid millions to stop hackers releasing its data

Caesars Entertainment reportedly paid "tens of millions of dollars" to hackers who threatened to release company data.

www.engadget.com

The ALPHV/BlackCat ransomware group claimed responsibility for the MGM Resorts cyber outage on Tuesday, and it apparently took the group only 10 minutes on a phone call to glean the information needed to shut down systems and slot machines — not the slot machines! — at casinos owned by MGM Resorts.

“All ALPHV ransomware group did to compromise MGM Resorts was hop on LinkedIn, find an employee, then call the Help Desk,” the organization wrote in a post on X. Those details came from ALPHV but have not been independently confirmed by security researchers. MGM Resorts didn’t respond to a request for comment but said on Tuesday that “Our resorts, including dining, entertainment and gaming, are currently operational.”

The Morning After: Hacking a Vegas casino may just take a single phone call

The biggest news stories this morning: Coca-Cola made an AI-generated soda, Microsoft reveals its underwhelming Xbox Game Pass Core library, hackers claim they shut down a Las Vegas casino with a phone call.

www.engadget.com

 

[plat]

Thanks for confirming that it was indeed ransomware, BryanB.

Is MGM going to pay? You often hear about these high-profile attacks and then the news just dies away and is largely forgotten by the public. Anyone remember Western Digital's ransom? All this data leakage and a highly provocative and obscene personal message from ALPHV to Western Digital made public but the news stories just fizzled out. Besides a "confirmation" by Western Digital, nothing further was disclosed (that I could find). A closed door, locked and bolted.

That attack happened back in April

 

[plat]

And here is ALPHV again, this time rambling on about MGM. Don't know if it'll spur any payments forthcoming but it does seem to be a pattern.

You. Are. The. Criminal. Dumbass.

Thoughts on ALPHV/BlackCat's Reaction to Caesars and MGM Ransomware Attack

ransomwaresommelier.com