Blog, FastPassCorp SSPR Blog
LinkedIn as the Trojan Horse at MGM: The Rising Threat of Social Engineering in IT Security | FastPassCorp
LinkedIn as the Trojan Horse at MGM: The Rising Threat of Social Engineering in IT Security
This article was originally published by LOGON’s partner FastPassCorp. Click here to view the original article.
The attackers ingeniously combined social engineering tactics with the wealth of information readily available on platforms like LinkedIn. They leveraged details of an MGM employee, casually shared on LinkedIn, to orchestrate a vishing attack. Posing as the employee, they called the MGM help desk, requested a password reset, and gained entry without resistance. The aftermath was chaotic, with ATMs, slot machines, key cards, and even room lights malfunctioning.
The attackers, attributed to either the ALPHV group or the youthful ‘Scattered Spider’ group, left no aspect unchecked, disrupting gambling activities and leaving hotel guests stranded.
Interestingly, this incident isn’t an anomaly. According to David Bradbury, Chief Security Officer at Okta, since August, both ALPHV and Scattered Spider have targeted five companies, including MGM and Caesars.
Given the rising prevalence of ransomware attacks, simply paying the ransom is not a viable solution. The FBI consistently advises against it, as it only emboldens cybercriminals. What’s urgently needed is proactive prevention measures that extend beyond technical safeguards.
So, how can IT security managers fortify themselves against such cunning attacks?
- Implement a rigorous process for user verification, devoid of emotional influence.
- Employ tests incorporating contextual and dynamic data inaccessible to hackers.
- Utilize Multi-Factor Authentication (MFA) whenever feasible.
- Employ manager approval as an additional layer of security.
- Integrate these protocols into your IT Service Management (ITSM) system.
This valuable insight is accessible through the FastPass solution, available in Cloud or On-premises versions. Certified by ServiceNow and TopDesk, it seamlessly integrates with all modern ITSM solutions. Additionally, it features advanced self-service password reset (SSPR) functionality to enhance user service and alleviate the help desk’s burden.
Self-Service Password Reset
Automation tool to reduce service desk cost and improve user experience and productivity. For Windows, SAP, Oracle, IBM and more.
Get Free Demo
Book a Free Demo with our specialist to learn more about FastPass Password Self Service Reset with 90% User Adoption
Read Next:
