OT SECURITY
HUB
BY ZUCKERGATES
// INCIDENT · 2023

MGM Resorts (Scattered Spider)

Social engineering ke help-desk membuka jalan ransomware ke seluruh infrastruktur kasino.

highUSAHospitalityScattered Spider
Impact
USD ~100 juta loss; slot, kunci kamar, POS Las Vegas lumpuh ~10 hari.
Initial vector
Vishing → IT helpdesk → Okta
Lessons learned
  • Help-desk verification yang kuat
  • Identity provider hardening
  • IR drill skala properti