The Scattered Spider group used a simple social engineering phone call to MGM’s IT help desk to gain initial access, then deployed ALPHV/BlackCat ransomware. The attack shut down slot machines, hotel key cards, and reservation systems across all MGM properties for over a week.