A tale of 2 casino ransomware attacks: One paid out, one did not - What can be learned from MGM’s and Caesars’ infosec moves::What can be learned from MGM’s and Caesars’ infosec moves
Not running Windows would be a good start.
A tale of 2 casino ransomware attacks: One paid out, one did not - What can be learned from MGM's and Caesars' infosec moves
Submitted 5 months ago by L4s@lemmy.world [bot] to technology@lemmy.world
https://www.theregister.com/2023/12/28/casino_ransomware_attacks/
Comments
just_another_person@lemmy.world 5 months ago
sylver_dragon@lemmy.world 5 months ago
Your choice of OS doesn’t help when your IAM provider’s tech support happily resets your admin passwords for the attacker.
just_another_person@lemmy.world 5 months ago
Windows is notoriously insecure and vulnerable to all manner of attacks and escalations that make it the main target for ransomware. Has nothing to with IAM.
JJROKCZ@lemmy.world 5 months ago
Most of our vendors only make products for windows, barely understand windows and certainly don’t understand Linux or as400, and they dont intend to. Those that do run Linux and as400 are actively transitioning their systems to a windows based version as it’s easier for the casinos to maintain.
Source: IT Director for a casino company and responsible for hundreds of windows servers, thousands of PCs, 12 Linux and half a dozen as400s - I’m not with Caesars or MGM thank god but their breaches caused me a ton of work and lost sleep trust me
just_another_person@lemmy.world 5 months ago
Welp, guess you’re SOL then.
fruitycoder@sh.itjust.works 5 months ago
Yikes. I’ve seen that strat before dinosaur vendors are the worst. My only advice to focus on replacing bad vendors like that wherever and whenever you can, getting stuck actively building out an already legacy system sucks. Good luck!
AdamEatsAss@lemmy.world 5 months ago
All gambling will now require you to first log in with your apple ID!
autotldr@lemmings.world [bot] 5 months ago
This is the best summary I could come up with:
Feature The same cybercrime crew broke into two high-profile Las Vegas casino networks over the summer, infected both with ransomware, and stole data belonging to tens of thousands of customers from the mega-resort chains.
In its report to the financial watchdog, Caesars cited a “social engineering attack on an outsourced IT support vendor,” which we now know was Okta, and said the crooks stole its customer loyalty program database, which contained a ton of personal information.
Ultimately, MGM suffered nearly a week of outages, operational disruptions, and angry customers, costing the corporation about $100 million in losses — and now its stolen data has reportedly been leaked.
When looking at what ransomware payment end up funding (weapons development, oppressive regimes, more cybercrime and network intrusions), with all other things being equal, we’d assume most organizations would choose to not give in to extortion demands.
All of these also likely went into the casino exec’s decision, said Megan Stifel, chief strategy officer for the Institute for Security and Technology and the executive director of the IST’s Ransomware Task Force.
If this includes health-care records, or data belonging to or about minors, they may be more inclined to pay the demand rather than have this information leaked, Kimberly Goody, head of cyber crime analysis at Mandiant, told The Register.
The original article contains 1,361 words, the summary contains 215 words. Saved 84%. I’m a bot and I’m open source!
AdamEatsAss@lemmy.world 5 months ago
We developed an AI to stop hackers, it determined that humans were the number one threat to the network and tried to eliminate us. We are now a part of the resistance fighting the AI overlords.
mosiacmango@lemm.ee 5 months ago
Ehh, let them win. Maybe they will do a better job of it.