“The conversation that granted initial access took just 10 minutes, according to the group.”
ALPHV says it found an MGM employee on LinkedIn and called the help desk. Ten minutes later the slot machines on the Strip were dark. MGM’s statement says its resorts are operational while its website stays down. The attack needed no exploit, just a help desk willing to trust a stranger on the phone.