3 ms·
Ocean's 0x11? I wonder if it's just an attack against their email servers or a bigger one, how networked are their operations? If we believe the urban legends a
by netsharc 3y ago
Ocean's 0x11? I wonder if it's just an attack against their email servers or a bigger one, how networked are their operations? If we believe the urban legends about how casinos operate, there's probably interesting conversations a cyber-attacker could find.
- mixdup 3y agoalmost certainly just a random/typical ransomware attack, not a specific target at them because they're a casino
- mickdarling 3y agoI was disturbed to hear from people first hand in Vegas saying it was making the ATMs inoperable. No details on how inoperable, like if it is just certain banking features or everything. The ATMs should not be effected in the same kind of attack that would take down the website and booking systems. Those should all be separate.
- dboreham 3y agoPossibly the ATMs get network connectivity via a path that has either been affected by the attack directly or shut down as a precaution.
- wintogreen74 3y agoI don't believe these are typical bank ATMs but specific to MGM that manage all the casino games (ex: pay-outs, loyalty, etc) as well, so would be tied into any MGM systems.
- plasticsoprano 3y agoCasino floor ATMs aren't just ATMs. They are also ticket redemption machines and therefore have to connect to the MGM network to redeem. I'd imagine the whole machine shutdown for security reasons if network connection is lost.
- mickdarling 3y agoYes, I think that MGM has actively shut everything down, rather than some massive hack that has effected all these separate systems. Best guess is that with the F1 races coming soon with what is expected to be the largest cashflow through Vegas ever, that MGM Resorts IT found issues in an audit in preparation for that massive event, found anomalies, and pulled the rip cord to shut everything down till they could sort out what systems were actually hit. That is materially different than a massive hack effecting all these various systems though.
- plasticsoprano 3y agoMGM has acknowledged it's an attack [1] and certain vegas gossip sites have stated that Caesars was hit last hit last week but was able to keep it better under wraps. 1. https://www.reviewjournal.com/business/casinos-gaming/mgm-resorts-cites-cybersecurity-issue-for-outages-2902751 https://www.reviewjournal.com/business/casinos-gaming/mgm-re...
- mickdarling 3y agoRight, they say almost exactly what I said above. "MGM Resorts recently identified a cybersecurity issue affecting some of the Company’s systems. Promptly after detecting the issue, we quickly began an investigation with assistance from leading external cybersecurity experts,” "We also notified law enforcement and took prompt action to protect our systems and data, including shutting down certain systems." The systems are down due to MGM shutting them down, not the active attack shutting things down.
- imglorp 3y agoWhile there's something to be said for ransomware targeting casinos, "because that's where the money is," that might also attract the wrong attention, and not all from the government. They might wish it was only from the government. https://www.politico.com/news/2022/01/14/russia-colonial-pipeline-arrest-527166 https://www.politico.com/news/2022/01/14/russia-colonial-pip...
- IAmGraydon 3y agoIt’s entirely possible that these systems were hacked separately.
- lucisferre 3y agoI think you meant 0x0B.
- jjkaczor 3y agoVery networked - but their email servers are now likely cloud-based SaaS.
- zie 3y ago;; ANSWER SECTION: mgmresorts.com. 300 IN MX 10 mgmresorts-com.mail.protection.outlook.com. Outlook handles their email.