Casino cyberattacks put a bullseye on Scattered Spider – and the FBI is closing in
(2024/05/23)
- Reference: 1716495370
- News link: https://www.theregister.co.uk/2024/05/23/mandiant_cto_scattered_spider/
- Source link:
Interview The cyberattacks against Las Vegas casinos over the summer put a big target on the backs of prime suspects Scattered Spider, according to Mandiant CTO Charles Carmakal.
The Google-owned security biz has been tracking the loosely knit crew of suspected teens and twenty-somethings - believed to be located in the US and UK - since 2022 when they kicked off [1]SIM swapping and social engineering attacks.
But the gang's more recent turn to [2]ransomware, [3]data theft , and high-profile [4]casino cyber-heists , which nearly [5]shutdown MGM Resorts' hotel and casino biz for a week, raised the stakes and turned law enforcement's attention to the predatory arachnid-themed crew.
[6]
"It certainly got the attention that is warranted after the casino attacks," Carmakal said in an interview with The Register you can see below.
[7]
[8]Youtube Video
Carmakal also discussed how the crew's techniques and motivations differ from the typical extortion group — and the lasting impact Scattered Spider will likely have on the cybercrime landscape.
[9]
The FBI has indicated that prosecutors are getting closer to charging people involved in the digital intrusions linked to Scattered Spider.
"There have been some arrests," Carmakal told us, and while he won't put a timeline on when he expects to see any suspects being hauled into court, "I do anticipate we will eventually hear good news." ®
Get our [10]Tech Resources
[1] https://www.theregister.com/2023/09/01/okta_scattered_spider/
[2] https://www.theregister.com/2023/09/15/scattered_spider_snares_100_victims/
[3] https://www.theregister.com/2023/10/12/caesars_breach_notification/
[4] https://www.theregister.com/2023/12/28/casino_ransomware_attacks/
[5] https://www.theregister.com/2023/09/11/mgm_resorts_cybersecurity_incident/
[6] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/cybercrime&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2Zk@8izUIzb-PPchRtKj9ZwAAAME&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0
[7] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/cybercrime&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44Zk@8izUIzb-PPchRtKj9ZwAAAME&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[8] https://www.youtube.com/watch?v=_piFUyOgmqc
[9] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/cybercrime&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44Zk@8izUIzb-PPchRtKj9ZwAAAME&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[10] https://whitepapers.theregister.com/
The Google-owned security biz has been tracking the loosely knit crew of suspected teens and twenty-somethings - believed to be located in the US and UK - since 2022 when they kicked off [1]SIM swapping and social engineering attacks.
But the gang's more recent turn to [2]ransomware, [3]data theft , and high-profile [4]casino cyber-heists , which nearly [5]shutdown MGM Resorts' hotel and casino biz for a week, raised the stakes and turned law enforcement's attention to the predatory arachnid-themed crew.
[6]
"It certainly got the attention that is warranted after the casino attacks," Carmakal said in an interview with The Register you can see below.
[7]
[8]Youtube Video
Carmakal also discussed how the crew's techniques and motivations differ from the typical extortion group — and the lasting impact Scattered Spider will likely have on the cybercrime landscape.
[9]
The FBI has indicated that prosecutors are getting closer to charging people involved in the digital intrusions linked to Scattered Spider.
"There have been some arrests," Carmakal told us, and while he won't put a timeline on when he expects to see any suspects being hauled into court, "I do anticipate we will eventually hear good news." ®
Get our [10]Tech Resources
[1] https://www.theregister.com/2023/09/01/okta_scattered_spider/
[2] https://www.theregister.com/2023/09/15/scattered_spider_snares_100_victims/
[3] https://www.theregister.com/2023/10/12/caesars_breach_notification/
[4] https://www.theregister.com/2023/12/28/casino_ransomware_attacks/
[5] https://www.theregister.com/2023/09/11/mgm_resorts_cybersecurity_incident/
[6] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/cybercrime&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2Zk@8izUIzb-PPchRtKj9ZwAAAME&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0
[7] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/cybercrime&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44Zk@8izUIzb-PPchRtKj9ZwAAAME&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[8] https://www.youtube.com/watch?v=_piFUyOgmqc
[9] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/cybercrime&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44Zk@8izUIzb-PPchRtKj9ZwAAAME&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[10] https://whitepapers.theregister.com/