MGM Resorts cybersecurity incident September 2023
However, I did play my $40 freeplay and $17 slot dollars on a machine. Also, I got my weekly gift but we were encouraged to show an email to prove we were entitled to the gift.
Quote: ChesterDogI was at Borgata on Sunday (9/17) afternoon. Each kiosk had a message on the screen saying that it was inaccessible.
However, I did play my $40 freeplay and $17 slot dollars on a machine. Also, I got my weekly gift but we were encouraged to show an email to prove we were entitled to the gift.
link to original post
That's good.
There are some MGM properties where the freeplay or a large bulk of offers must first be activated at the kiosk. So with kiosks out that pretty much knocks out freeplay.
That's a new announcement from MGM that most everything is up and running. They mention freeplay but say nothing about kiosks.
Anyone can confirm if those are still down?
Quote: darkozhttps://www.google.com/amp/s/www.8newsnow.com/news/local-news/mgm-resorts-releases-update-for-guests-following-cyber-attack/amp/
That's a new announcement from MGM that most everything is up and running. They mention freeplay but say nothing about kiosks.
Anyone can confirm if those are still down?
link to original post
I still can't access my account on their website tho.
The app is starting to show a faint light at the end of the tunnel.Quote: darkozThat's a new announcement from MGM that most everything is up and running. They mention freeplay but say nothing about kiosks.
Anyone can confirm if those are still down?
link to original post
I posted this two days ago:
Quote: DJTeddyBearIt looks like there is no end to the MGM troubles.
It used to be 9/13-9/17.
link to original post
Now I says this:
I’d be interested to hear what this guy has to say about current events.
Quote: DJTeddyBearThe keynote speakers for G2E have been announced.
I’d be interested to hear what this guy has to say about current events.
link to original post
he wont last through this i promise
Quote: heatmapQuote: DJTeddyBearThe keynote speakers for G2E have been announced.
I’d be interested to hear what this guy has to say about current events.
link to original post
he wont last through this i promise
link to original post
I wouldn't be so sure.. if this article is accurate, the impact to the bottom line might not be so bad.
https://thenevadaindependent.com/article/mgms-losses-in-cyberattack-will-be-insured-up-to-200-million
Quote: MukkeQuote: heatmapQuote: DJTeddyBearThe keynote speakers for G2E have been announced.
I’d be interested to hear what this guy has to say about current events.
link to original post
he wont last through this i promise
link to original post
I wouldn't be so sure.. if this article is accurate, the impact to the bottom line might not be so bad.
https://thenevadaindependent.com/article/mgms-losses-in-cyberattack-will-be-insured-up-to-200-million
link to original post
They are apparently advertising on twitter for network engineers for 110 dollars an hour for 7 days a week for 10 hours a day to get their networks back up and running
When you advertise that you’ve already gotten rid of their current network engineers and are starting over
Lol
These hackers have been sitting. Learning. Every single thing about these machines have been cracked open and analyzed to the point where most of the network engineers have no clue.
Because they are closed proprietary slot machine systems this problem will never be solved.
They have all of the exploits sitting waiting on different components of the slot machines where a network engineers probably cant even legally crack open a slpt machine without someone showing them code.
Networking geeks normally are not hackers or programmers they are sheep with login creds and power to do the things they shouldnt be able to do.
Quote: AxelWolfThe hackers could look like Robin Hoods if they loaded up some free play on some people's cards and wiped out records of credit players.
link to original post
They have already apparently considered that and said in one of their measages a reply to that but i forget as of this point
Cool I didn't know that. If they are listening, perhaps they can wipe off any trespassing and no mailed records. Do they have a website or Twitter for comments and suggestions?Quote: heatmapQuote: AxelWolfThe hackers could look like Robin Hoods if they loaded up some free play on some people's cards and wiped out records of credit players.
link to original post
They have already apparently considered that and said in one of their measages a reply to that but i forget as of this point
link to original post
Quote: AxelWolfCool I didn't know that. If they are listening, perhaps they can wipe off any trespassing and no mailed records. Do they have a website or Twitter for comments and suggestions?Quote: heatmapQuote: AxelWolfThe hackers could look like Robin Hoods if they loaded up some free play on some people's cards and wiped out records of credit players.
link to original post
They have already apparently considered that and said in one of their measages a reply to that but i forget as of this point
link to original post
link to original post
you really need to understand why this is such a big deal. its because of trust. trust is a feeling. thats all it is. the feeling could be attached to the fact that without a phrase someone can not access something. and this is the problem.
we have advertised security but have lied.
our world is based on feelings. how are you feeling today axel?
I have the ability to shrug my shoulders and say, "Meh, it is what it is." I try to only sweat the big stuff that directly affects me and the people in my life. I guess the hackers could have my information, I just hope they do some good with it.Quote: heatmapQuote: AxelWolfCool I didn't know that. If they are listening, perhaps they can wipe off any trespassing and no mailed records. Do they have a website or Twitter for comments and suggestions?Quote: heatmapQuote: AxelWolfThe hackers could look like Robin Hoods if they loaded up some free play on some people's cards and wiped out records of credit players.
link to original post
They have already apparently considered that and said in one of their measages a reply to that but i forget as of this point
link to original post
link to original post
you really need to understand why this is such a big deal. its because of trust. trust is a feeling. thats all it is. the feeling could be attached to the fact that without a phrase someone can not access something. and this is the problem.
we have advertised security but have lied.
our world is based on feelings. how are you feeling today axel?
link to original post
Quote: AxelWolfI have the ability to shrug my shoulders and say, "Meh, it is what it is." I try to only sweat the big stuff that directly affects me and the people in my life. I guess the hackers could have my information, I just hope they do some good with it.
I am like you. I just can't take the time to worry about low probability events. I received a letter from Target that my credit card was compromised. When I read the details 40 million cards were exposed. In my mind it is very unlikely my card will be one of them used out of the 40 million. Just not worth worrying about.
And the same goes for me regarding casinos cheating, like ZenKing and others claim and are so very paranoid about. Including gaffed machines, blackjack SHFMs, dealers, etc. Has it happened? Yes. Can it happen? Yes. Will it happen? Yes. Is it happening? Yes.Quote: DRichQuote: AxelWolfI have the ability to shrug my shoulders and say, "Meh, it is what it is." I try to only sweat the big stuff that directly affects me and the people in my life. I guess the hackers could have my information, I just hope they do some good with it.
I am like you. I just can't take the time to worry about low probability events. I received a letter from Target that my credit card was compromised. When I read the details 40 million cards were exposed. In my mind it is very unlikely my card will be one of them used out of the 40 million. Just not worth worrying about.
link to original post
Is it super rare? I'll say Yes.
*Note: This doesn't apply to online unregulated or foreign casinos. A large percentage of that S*** is definitely probably gaffed. But, that doesn't mean you can't win or gain an advantage.
As to why there's never any 100% guarantees in Advantage play. Just imagine doing all the math and calculating your advantage and risking a large sum of money knowing your return would be x amount at a minimum only to have something totally unpredictable happen.Quote: PenguinsOfPitI go to Borgata every week and I’m VERY concerned that they’ll just screw people on the Saturday night free play drawings. They’ve already cancelled them twice and this Saturday is supposed to the first of two “main events” where they give away a car etc. They have already cancelled the multiplier days at that
link to original post
DarkOz been MIA.
D.O. did you have multiple players' cards going and get F****** ?
Quote: AxelWolfAs to why there's never any 100% guarantees in Advantage play. Just imagine doing all the math and calculating your advantage and risking a large sum of money knowing your return would be x amount at a minimum only to have something totally unpredictable happen.Quote: PenguinsOfPitI go to Borgata every week and I’m VERY concerned that they’ll just screw people on the Saturday night free play drawings. They’ve already cancelled them twice and this Saturday is supposed to the first of two “main events” where they give away a car etc. They have already cancelled the multiplier days at that
link to original post
DarkOz been MIA.
D.O. did you have multiple players' cards going and get F****** ?
link to original post
I responded via PM
Quote: AxelWolfAs to why there's never any 100% guarantees in Advantage play. Just imagine doing all the math and calculating your advantage and risking a large sum of money knowing your return would be x amount at a minimum only to have something totally unpredictable happen.
DarkOz been MIA.
D.O. did you have multiple players' cards going and get F****** ?
link to original post
In the last three weeks, Borgata has been depromoing and treaspassing people. In at least 2 cases, they tried to backroom people.
Quote: NYCAPQuote: AxelWolfAs to why there's never any 100% guarantees in Advantage play. Just imagine doing all the math and calculating your advantage and risking a large sum of money knowing your return would be x amount at a minimum only to have something totally unpredictable happen.
DarkOz been MIA.
D.O. did you have multiple players' cards going and get F****** ?
link to original post
In the last three weeks, Borgata has been depromoing and treaspassing people. In at least 2 cases, they tried to backroom people.
link to original post
They've been in this cyber attack for three weeks. Do you feel the cyber attack led them to the promo abuse issues?
It may have been accidental. For example hosts trying to see which of their value customers are affected by the attack and getting surprised at past activity.
I currently don't have anything at Borgata but have in the past.
Quote: darkozQuote: NYCAPQuote: AxelWolfAs to why there's never any 100% guarantees in Advantage play. Just imagine doing all the math and calculating your advantage and risking a large sum of money knowing your return would be x amount at a minimum only to have something totally unpredictable happen.
DarkOz been MIA.
D.O. did you have multiple players' cards going and get F****** ?
link to original post
In the last three weeks, Borgata has been depromoing and treaspassing people. In at least 2 cases, they tried to backroom people.
link to original post
They've been in this cyber attack for three weeks. Do you feel the cyber attack led them to the promo abuse issues?
It may have been accidental. For example hosts trying to see which of their value customers are affected by the attack and getting surprised at past activity.
I currently don't have anything at Borgata but have in the past.
link to original post
High stakes customers started to complain a few months a ago. First, they locked down entrances to high stakes room a while ago. A week before cyber attack, they depromoed and 86ed the first group. A week later, they cut more names. Hustling has been getting out of hand at Borgata and a crackdown had to be coming sooner or later.
The promo folks that got thown out... Security is definitely looking out for them. In both instances, they were stopped right at entrance door - they did mot even have a chance to get to casino floor before being identified.
Quote: NYCAPQuote: darkozQuote: NYCAPQuote: AxelWolfAs to why there's never any 100% guarantees in Advantage play. Just imagine doing all the math and calculating your advantage and risking a large sum of money knowing your return would be x amount at a minimum only to have something totally unpredictable happen.
DarkOz been MIA.
D.O. did you have multiple players' cards going and get F****** ?
link to original post
In the last three weeks, Borgata has been depromoing and treaspassing people. In at least 2 cases, they tried to backroom people.
link to original post
They've been in this cyber attack for three weeks. Do you feel the cyber attack led them to the promo abuse issues?
It may have been accidental. For example hosts trying to see which of their value customers are affected by the attack and getting surprised at past activity.
I currently don't have anything at Borgata but have in the past.
link to original post
High stakes customers started to complain a few months a ago. First, they locked down entrances to high stakes room a while ago. A week before cyber attack, they depromoed and 86ed the first group. A week later, they cut more names. Hustling has been getting out of hand at Borgata and a crackdown had to be coming sooner or later.
The promo folks that got thown out... Security is definitely looking out for them. In both instances, they were stopped right at entrance door - they did mot even have a chance to get to casino floor before being identified.
link to original post
As both a hustler and a multi-strike VP player, I’m good with it. Less competition. To tell you the truth I’ve been seeing different faces hustling machines but less others lately at Borg. Not sure if it’s because of the attack or what.
Quote: heatmap
They are apparently advertising on twitter for network engineers for 110 dollars an hour for 7 days a week for 10 hours a day to get their networks back up and running
When you advertise that you’ve already gotten rid of their current network engineers and are starting over
link to original post
Interesting. A quick google didn't find anything. I'm sure a big company like MGM is always looking for all sorts of people, but 7 days a week certainly is unusual. If true.
Quote: heatmap
These hackers have been sitting. Learning. Every single thing about these machines have been cracked open and analyzed to the point where most of the network engineers have no clue.
Because they are closed proprietary slot machine systems this problem will never be solved.
They have all of the exploits sitting waiting on different components of the slot machines where a network engineers probably cant even legally crack open a slpt machine without someone showing them code.
link to original post
This just looks like speculation.
Yes, the major attacks like this rarely happen over night, but after months of careful planning and reconnaissance.
But to jump from that to say that "They have all of the exploits sitting waiting on different components of the slot machines" just looks like standard conspiracy theorists where from the beginning some people were sure this hack was about slot machines. Do you have any sources to back this up, or is this just your own speculation?
Quote: MukkeQuote: heatmap
They are apparently advertising on twitter for network engineers for 110 dollars an hour for 7 days a week for 10 hours a day to get their networks back up and running
When you advertise that you’ve already gotten rid of their current network engineers and are starting over
link to original post
Interesting. A quick google didn't find anything. I'm sure a big company like MGM is always looking for all sorts of people, but 7 days a week certainly is unusual. If true.Quote: heatmap
These hackers have been sitting. Learning. Every single thing about these machines have been cracked open and analyzed to the point where most of the network engineers have no clue.
Because they are closed proprietary slot machine systems this problem will never be solved.
They have all of the exploits sitting waiting on different components of the slot machines where a network engineers probably cant even legally crack open a slpt machine without someone showing them code.
link to original post
This just looks like speculation.
Yes, the major attacks like this rarely happen over night, but after months of careful planning and reconnaissance.
But to jump from that to say that "They have all of the exploits sitting waiting on different components of the slot machines" just looks like standard conspiracy theorists where from the beginning some people were sure this hack was about slot machines. Do you have any sources to back this up, or is this just your own speculation?
link to original post
lol multi billion dollar company gets hacked by teenagers and you bring out the conspiracy theorist label you must be joking
Quote: heatmap
lol multi billion dollar company gets hacked by teenagers and you bring out the conspiracy theorist label you must be joking
link to original post
Genuinely not sure what you mean,
This likely was a very advanced attack. And I agree that it is quite likely that the attackers are still inside the systems.
The conspiracy theorist thought is because your post is very focused on slot machines. That just reads like the classic gambler's tunnel vision that slots are an obvious target to attack. But in many cases, what the company does, doesn't matter. As long as it's a big company that can pay a big ransom.
Of course, there are cases of nation state actors going after very specific targets, including the Lazarus group going after ATMs and the SWIFT system. But if it is really the Scattered Spider group that was responsible for this attack, it seems unlikely that they would somehow be trying to target the slot machines specifically.
Can slot machines be hacked from the outside and be programmed to pay out at certain times or thought some at will triggering method?Quote: MukkeQuote: heatmap
lol multi billion dollar company gets hacked by teenagers and you bring out the conspiracy theorist label you must be joking
link to original post
Genuinely not sure what you mean,
This likely was a very advanced attack. And I agree that it is quite likely that the attackers are still inside the systems.
The conspiracy theorist thought is because your post is very focused on slot machines. That just reads like the classic gambler's tunnel vision that slots are an obvious target to attack. But in many cases, what the company does, doesn't matter. As long as it's a big company that can pay a big ransom.
Of course, there are cases of nation state actors going after very specific targets, including the Lazarus group going after ATMs and the SWIFT system. But if it is really the Scattered Spider group that was responsible for this attack, it seems unlikely that they would somehow be trying to target the slot machines specifically.
link to original post
there's nothing much in the high limit slots. A couple of ult x and om.Quote: NYCAPHigh stakes customers started to complain a few months a ago. First, they locked down entrances to high stakes room a while ago. A week before cyber attack, they depromoed and 86ed the first group. A week later, they cut more names. Hustling has been getting out of hand at Borgata and a crackdown had to be coming sooner or later.
The promo folks that got thown out... Security is definitely looking out for them. In both instances, they were stopped right at entrance door - they did mot even have a chance to get to casino floor before being identified.
link to original post
Unless they added new stuff in the past year? (Haven't been there since 2021)
As for the regular floor, you could definitely make 4 figures in a week doing only weekdays before 4pm where there was less competition.
Maybe I should go back down there now for 2024 now that mgmt cleaned the place out?
Quote: AxelWolfCan slot machines be hacked from the outside and be programmed to pay out at certain times or thought some at will triggering method?Quote: MukkeQuote: heatmap
lol multi billion dollar company gets hacked by teenagers and you bring out the conspiracy theorist label you must be joking
link to original post
Genuinely not sure what you mean,
This likely was a very advanced attack. And I agree that it is quite likely that the attackers are still inside the systems.
The conspiracy theorist thought is because your post is very focused on slot machines. That just reads like the classic gambler's tunnel vision that slots are an obvious target to attack. But in many cases, what the company does, doesn't matter. As long as it's a big company that can pay a big ransom.
Of course, there are cases of nation state actors going after very specific targets, including the Lazarus group going after ATMs and the SWIFT system. But if it is really the Scattered Spider group that was responsible for this attack, it seems unlikely that they would somehow be trying to target the slot machines specifically.
link to original post
link to original post
dude they are in the slot machines (its just a computer right?)... able to lock them up... they most likely have access to all parts of memory and therefore most likely able to call the particular function used to payout anyone but like i mentioned i rmember seeing that they mentioned they could do it but mentioned that they wouldnt
no, according to one of the videos posted in this thread.Quote: AxelWolfCan slot machines be hacked from the outside and be programmed to pay out at certain times or thought some at will triggering method?
link to original post
Changing rtp requires physical access to each machine
That's been my understanding for the longest time however, I don't know what I don't know. I assume they have access to the slot club and that has access to the machines and we non-hackers might assume it's possible for a good hacker to do something that could aid them in beating the machines. Why anyone would step foot in a casino that could get paid 10's millions in ransom money is beyond me.Quote: 100xOddsno, according to one of the videos posted in this thread.Quote: AxelWolfCan slot machines be hacked from the outside and be programmed to pay out at certain times or thought some at will triggering method?
link to original post
Changing rtp requires physical access to each machine
link to original post
Now let's talk about online slots. Can they hack those into paying out undetected or add credits to one's account?
Quote: 100xOddsthere's nothing much in the high limit slots. A couple of ult x and om.Quote: NYCAPHigh stakes customers started to complain a few months a ago. First, they locked down entrances to high stakes room a while ago. A week before cyber attack, they depromoed and 86ed the first group. A week later, they cut more names. Hustling has been getting out of hand at Borgata and a crackdown had to be coming sooner or later.
The promo folks that got thown out... Security is definitely looking out for them. In both instances, they were stopped right at entrance door - they did mot even have a chance to get to casino floor before being identified.
link to original post
Unless they added new stuff in the past year? (Haven't been there since 2021)
As for the regular floor, you could definitely make 4 figures in a week doing only weekdays before 4pm where there was less competition.
Maybe I should go back down there now for 2024 now that mgmt cleaned the place out?
link to original post
It's not my method but since he was referring to people being promo banned I believe he was talking about a team that used high limits to generate future offers and/or put some decent cover play on multiple cards being used.
Using MH to move the meter significantly while obtaining offers with the MH jackpot a sort of reimbursement on your investment. I know the Borgata high limits has at least 2 $10,000 MH. There's a few more on the main floor including 3 $16,000 MH.
The only problem is winning jackpots on other players cards. It's never been a problem at Borgata but I suspect that has changed recently and they are using that to identify AP's using multiple cards.
Much of the response on Twitter is that $110 per hour is chump change and will not attract the kind of talent needed to do this job.Personally, I agree - particularly since it’s a very short term position. If it was a permanent position, then maybe they’d get the right person.
Quote: DJTeddyBearI found the job listing:
Personally, I agree - particularly since it’s a very short term position. If it was a permanent position, then maybe they’d get the right person.
link to original post
they want to stick a bandaid on this and the blood will continue to flow
get ready for the class action lawsuits for leaking everyones PII ... woops did i say leaked i meant to say they willingly gave it away by having sub par security maybe if they would be willing to invest more money this wouldnt have happened
Quote: 100xOddsno, according to one of the videos posted in this thread.Quote: AxelWolfCan slot machines be hacked from the outside and be programmed to pay out at certain times or thought some at will triggering method?
link to original post
Changing rtp requires physical access to each machine
link to original post
That is true for about 98% of the machines. Maybe the other 2% could be hacked remotely.
Quote: DJTeddyBear
Personally, I agree - particularly since it’s a very short term position. If it was a permanent position, then maybe they’d get the right person.
$110 an hour is a good rate if it was a full time position but for three weeks of service that does seem very low.
Quote: DRichQuote: DJTeddyBear
Personally, I agree - particularly since it’s a very short term position. If it was a permanent position, then maybe they’d get the right person.
$110 an hour is a good rate if it was a full time position but for three weeks of service that does seem very low.
link to original post
7 days. 10 hours per day. That’s $7,700 a week. If that’s ‘very low’ what do you think would be ‘average’? I am sort of interested because wife’s daughter is graduating with a ‘cybersecurity’ degree.
I would guess if you take the MGM job and actually help them it could lead to a more ‘normal’ 5 day a week full time job.
Quote: SOOPOOQuote: DRichQuote: DJTeddyBear
Personally, I agree - particularly since it’s a very short term position. If it was a permanent position, then maybe they’d get the right person.
$110 an hour is a good rate if it was a full time position but for three weeks of service that does seem very low.
link to original post
7 days. 10 hours per day. That’s $7,700 a week. If that’s ‘very low’ what do you think would be ‘average’? I am sort of interested because wife’s daughter is graduating with a ‘cybersecurity’ degree.
I would guess if you take the MGM job and actually help them it could lead to a more ‘normal’ 5 day a week full time job.
link to original post
In December my basement flooded and the repair work came out to about $300 an hour when the final bill tally came in (this is NY of course where everything is expensive).
2004 I was making $400 an hour on that same schedule working in Hollywood as a negative cutter.
We are talking about getting a billion dollar nationwide business up and running because they can't do it themselves...
Quote: SOOPOO
7 days. 10 hours per day. That’s $7,700 a week. If that’s ‘very low’ what do you think would be ‘average’? I am sort of interested because wife’s daughter is graduating with a ‘cybersecurity’ degree.
I would guess if you take the MGM job and actually help them it could lead to a more ‘normal’ 5 day a week full time job.
I would expect that a highly skilled professional in that field would ask for closer to $300 an hour for those three weeks. I have a nephew just out of college about a year ago with a bachelors in cyber-security. He is in an entry level position and I would be surprised if he is working for less than $60 an hour.
Quote: SOOPOOQuote: DRichQuote: DJTeddyBear
Personally, I agree - particularly since it’s a very short term position. If it was a permanent position, then maybe they’d get the right person.
$110 an hour is a good rate if it was a full time position but for three weeks of service that does seem very low.
link to original post
7 days. 10 hours per day. That’s $7,700 a week. If that’s ‘very low’ what do you think would be ‘average’? I am sort of interested because wife’s daughter is graduating with a ‘cybersecurity’ degree.
I would guess if you take the MGM job and actually help them it could lead to a more ‘normal’ 5 day a week full time job.
link to original post
Vaguely related:
Yard signs along the major intersections here say that they're looking to hire electricians at $80/hr.
I would hope cybersecurity analysts responding to an emergency can do better.
Lot's of IT staff is non union and lots of them don't get OT pay.
Fresh hot popcorn for sale.Quote: TorghattenMGM was hacked again around 7am this morning.
link to original post
Get your popcorn.. get your popcorn here
Quote: TorghattenMGM was hacked again around 7am this morning.
link to original post
Link?
Quote: OnceDearQuote: TorghattenMGM was hacked again around 7am this morning.
link to original post
Link?
link to original post
Sorry, I was told it by a dealer at a MGM property.
Super reliable..Quote: TorghattenQuote: OnceDearQuote: TorghattenMGM was hacked again around 7am this morning.
link to original post
Link?
link to original post
Sorry, I was told it by a dealer at a MGM property.
link to original post
