All it took for MGM Resorts International to be compromised with ransomware was a quick phone call, which some now call “voice phishing” or “vishing.” An attacker used LinkedIn information to pose as an employee; he asked MGM’s help desk for a password change, after which the attackers were able to install ransomware. MGM is now up to $52 million in lost revenues and counting. Two takeaways. First, if you call support for a manual password reset, expect to be asked for a lot of verification, such as a video call where you show your driver’s license. Second, if you receive a call at work from an unknown person asking you to do anything involving money or account credentials, hang up, verify their identity and authorization, and proceed only if they check out.
(Images by iStock.com/1550539 and HT Ganzo)
Stop by either store and let's see if we can figure it out together!
Stop by either store and let's see if we can figure it out together!
Stop by either store, and we'll be happy to see what we can do to help you.
Stop by either store, and we'll be happy to see what we can do.
Useful read. I have been tinkering with virtual machines on my Mac recently, and this fits neatly into the things…