{"id":1382,"date":"2026-06-17T18:04:14","date_gmt":"2026-06-17T23:04:14","guid":{"rendered":"https:\/\/cmitsolutions.com\/lasvegas-nv-1206\/?p=1382"},"modified":"2026-06-17T18:06:14","modified_gmt":"2026-06-17T23:06:14","slug":"alopez-2","status":"publish","type":"post","link":"https:\/\/cmitsolutions.com\/lasvegas-nv-1206\/blog\/alopez-2\/","title":{"rendered":"Scattered Spider Is Still Targeting Las Vegas SMBs in 2026"},"content":{"rendered":"
\n\u26a0 Cybersecurity Alert<\/span><\/p>\n

Scattered Spider Is Still Targeting Las Vegas \u2014 What Every SMB Must Know in 2026<\/h2>\n

The group that cost MGM $100M has evolved. Now they\u2019re using AI to hit businesses your size \u2014 and your IT help desk is their front door.<\/p>\n

Published by CMIT Solutions of Las Vegas \u00b7 Cybersecurity \u00b7 6 min read<\/p>\n<\/div>\n

The Las Vegas Attack That Changed Everything<\/h2>\n

In September 2023, a group of young hackers known as Scattered Spider<\/strong> \u2014 also tracked as UNC3944 by security researchers \u2014 did something that shocked the cybersecurity world: they called the IT help desk at MGM Resorts International, impersonated an employee found on LinkedIn, and socially engineered their way into the company\u2019s systems. The result was more than $100 million in damages, 10 days of operational disruption, and a ransomware payload deployed by their ALPHV\/BlackCat partners. Casino floors went dark. Hotel reservations collapsed. MGM\u2019s stock dropped overnight.<\/p>\n

That same month, Caesars Entertainment paid an estimated $15 million ransom after suffering a nearly identical attack. Two of Las Vegas\u2019s most sophisticated, well-funded corporations were compromised in a matter of weeks \u2014 not through elaborate zero-day exploits, but through a phone call and a convincing story.<\/p>\n

Fast-forward to 2026: Scattered Spider has not gone away. FBI and CISA advisories confirm the group remains active, has expanded its targeting beyond hospitality and gaming, and has integrated AI-generated voice cloning and deepfake impersonation<\/strong> into their social engineering playbook. For Las Vegas small and mid-sized businesses \u2014 the vendors, contractors, legal firms, medical offices, and service companies that power this city\u2019s economy \u2014 managed IT services Las Vegas providers are now the first and most critical line of defense.<\/p>\n

\u26a0 Key Stat<\/span>
\nScattered Spider bypassed enterprise-grade security at MGM and Caesars using only a phone call and publicly available LinkedIn data. Your business is a softer target \u2014 but managed IT services that enforce proper identity verification and endpoint monitoring can close the gap before attackers find it.<\/em><\/div>\n

How Scattered Spider\u2019s Attacks Actually Work<\/h2>\n

Understanding Scattered Spider\u2019s methodology is the first step toward stopping them. Unlike traditional ransomware gangs that probe for unpatched servers or phish email accounts, Scattered Spider\u2019s signature move is telephone-based social engineering<\/strong> \u2014 specifically targeting IT help desks, cloud identity providers like Okta, and employees with privileged account access.<\/p>\n