Hackers Claim MGM Resorts Were Compromised in 10 Minutes

In a recent cyber incident, the ALPHV/BlackCat ransomware group has claimed responsibility for causing disruptions at MGM Resorts. 

Their method involved gaining an employee’s trust via a phone call, which reportedly took only 10 minutes to execute.

The ALPHV ransomware group detailed their approach, stating, “All ALPHV ransomware group did to compromise MGM Resorts was hopped on LinkedIn, find an employee, then call the Help Desk.”

All ALPHV ransomware group did to compromise MGM Resorts was hop on LinkedIn, find an employee, then call the Help Desk.

A company valued at $33,900,000,000 was defeated by a 10-minute conversation.

— vx-underground (@vxunderground) September 13, 2023

No, this isn't an attempt to screw anyone over. This particular subgroup of ALPHV ransomware has established a reputation of being remarkably gifted at social engineering for initial access.

It isn't really a surprise ALPHV (or the subgroup) is behind this attack.

— vx-underground (@vxunderground) September 13, 2023

The consequences of this breach have been felt by MGM Resorts, with customers noticing disruptions, particularly with slot machines at their casinos on the Las Vegas Strip. 

For further information about Cyber Attacks at MGM Systems, refer to our previous article.

As of Wednesday morning, the company is still grappling with downtime issues, including website disruptions. 

MGM Resorts has not yet provided an official comment on the situation but did mention on Tuesday that their resorts, including dining, entertainment, and gaming, remain operational.

pic.twitter.com/nxIweGInsB

— MGM Resorts (@MGMResortsIntl) September 11, 2023

The ALPHV ransomware group is known in the cybersecurity community for its proficiency in social engineering tactics to gain initial access. 

Subsequently, they often employ ransomware schemes to pressure their targets into paying a ransom. 

As seen in their data leak sites, they have previously targeted major corporations, including beauty giant Estée Lauder.

MGM Resorts confirmed the cyber incident on Monday, acknowledging that it impacted various systems across its suite of casinos. 

While the company took swift action to protect its systems and data, including shutting down certain systems, specific details regarding the extent of the shutdown and affected systems have not been officially disclosed. 

Customer reports suggest issues with reservations, ATM usage, certain games, and mobile key entry into hotel rooms.

MGM Resorts has recently provided an update regarding its current operational status. They have announced that their dining, entertainment, and gaming facilities are fully operational and available for guests to enjoy.

pic.twitter.com/Ir6IhOdN9X

— MGM Resorts (@MGMResortsIntl) September 12, 2023

This is great news for anyone planning a visit to MGM Resorts, as they can be assured that they will have access to a wide range of amenities and activities during their stay.

Keep informed about the latest cybersecurity news by following us on Google News, Linkedin, Twitter, and Facebook.