Social Engineering
Security incidents tagged Social Engineering. Newest first.
0 Social Engineering incidents in the last 12 months
Critical 4 · High 3 · Med 2 · Low 1 · Update ½Severity-weighted: critical 4 · high 3 · medium 2 · low 1 · update ½LessMore
- Incidents
- 2
- Live
- 0
- Patched
- 2
- Days without an incident
- 1141
- Longest quiet run: 1113 days (Oct 6–Oct 22)
Show 2 older incidents2 older incidents
September 2023 1
- HighNo fix needed
MGM Resorts and Caesars hit by Scattered Spider
Scattered Spider, an ALPHV/BlackCat affiliate, used social engineering to breach two Las Vegas casino giants. Caesars lost its loyalty program database and reportedly paid about $15M. MGM shut down systems for days and estimated a $100M hit, with pre-March-2019 customer data stolen.
MGM Resorts International; Caesars EntertainmentClosed Oct 5, 2023
August 2023 1
HighRetool breach: SMS phishing, deepfaked voice call and synced MFA codesNo fix needed
Retool (cloud) No fix needed
An attacker phished a Retool employee by SMS, then called them with a deepfaked voice to get an MFA code. Because Google Authenticator synced codes to the employee's Google account, the attacker got their MFA codes too, and took over 27 cloud customer accounts, all in crypto.
