MGM Grand Attack - ALPHV/BlackCat

Recently, we all heard about MGM grand attack. As per the reports, Attackers got the access of system using vishing attack. A 10 minute phone call with attacker pretending to be an employee caused this massive breakdown. A group known as Scattered Spider is believed to be responsible for the MGM breach, and it reportedly used ransomware made by ALPHV aka BlackCat, a ransomware-as-a-service group.

we have covered our observation on this Ransomware in REDLab newsletter in July 2023. We tested this strain in the REDLab which was detected by our client health detection feature and a system anomaly as well as an alert was generated with file-systems backup.