Watch and track your favorite playlist.
Curated by: Network Intelligence (66 videos)
A $34 billion company defeated by a 10-minute phone call. No malware. No zero-days. Just a teenager who knew how to talk. MGM Resorts. Caesar's Palace. Marks & Spencer. Harrods. Jaguar Land Rover. All hacked by the same group. Most of them teenagers. Some still in school. They call themselves Scattered Spider. The FBI tracks them as UNC3944. In Las Vegas, they are known as the kids who broke the casino industry. In September 2023, one of them called the MGM IT help desk, claimed to be a locked-out senior systems engineer, and read out an employee's full name, ID and date of birth — all scraped from LinkedIn in under 5 minutes. The help desk reset the password. Ten minutes later, they were inside the network of a $34 billion company. For 72 hours, slot machines went dark. Hotel key cards stopped working. ATMs failed. MGM lost $100 million in 8 days. Caesar's Palace paid a $15 million ransom. Scattered Spider does not write malware. They do not hunt zero-days. They do not break encryption. They speak English, they sound like you, they scrape LinkedIn, and they call the help desk. That is the entire technique. The same playbook hit Marks & Spencer (£300M), the Co-op, Harrods, and Jaguar Land Rover — 5 weeks of factory shutdowns and £1.9 billion in damage, the most expensive cyber attack in British history. Now three groups have merged under one name: LAPSUS$. Here is what matters for your security. Your perimeter is now the help desk. Three things to do this week: 1. Your help desk should never reset a password from a phone call alone. 2. Every privileged account reset needs a video call to a known number. 3. Treat LinkedIn as hostile reconnaissance. Stop letting employees post internal job titles and sensitive details. 🔔 Subscribe for weekly threat intelligence: https://www.youtube.com/@NetworkIntelligence 📩 Questions? contact@networkintelligence.ai | https://www.networkintelligence.ai/ #CyberSecurity #ScatteredSpider #LAPSUS #SocialEngineering #InfoSec #ThreatIntelligence #HelpDeskSecurity #CyberAttack #UNC3944 #CyberAwareness