{"ok":true,"trend":{"id":427849,"platform":"mastodon","region":"global","key":"how scattered spider shut down las vegas with one phone call, retold with low-poly potatoes 🥔 linkedin recon → help-desk","title":"How Scattered Spider shut down Las Vegas with one phone call, retold with low-poly potatoes 🥔 LinkedIn recon → help-desk","url":"https://infosec.exchange/@PotatoCrimes/117357421192307031","first_seen":"2026-09-30T01:56:04.192125Z","last_seen":"2026-09-30T01:56:04.192125Z","last_rank":7,"peak_rank":1,"last_volume":1,"peak_volume":1,"seen_count":1,"score":0.93359375,"category_hint":"cybersecurity","section":"technology","category":"cybersecurity","summary":"Scattered Spider's 2023 attack on MGM Resorts is being retold in a quirky animated explainer, with low-poly potato characters. The story shows how a single phone call, LinkedIn research and help-desk impersonation led to a password and MFA reset, ransomware across 100+ MGM servers and the shutdown of Las Vegas operations. The campaign later hit Caesars, M&S, Salesforce clients and TfL, where two members were arrested.","why":"A creative animated retelling of the MGM breach is drawing renewed attention to Scattered Spider's social-engineering tactics.","tone":"neutral","entities":["Scattered Spider","MGM Resorts","Caesars Entertainment","Transport for London","Marks & Spencer"],"summarized_at":"2026-09-30T01:56:39.240734Z","meta":{"tag":"infosec","via":"scan","kind":"status","lang":"en","instance":"mastodon.social","tag_uses":1103},"nw":null,"promo":null,"kind":null,"importance":null,"hidden":false,"hide_reason":null,"judged_at":null,"title_en":"Scattered Spider's MGM hack retold with low-poly potatoes","section_name":"Technology","category_name":"Cybersecurity","timeline":[{"captured_at":"2026-09-30T01:56:04.192125Z","rank":1,"volume":1},{"captured_at":"2026-09-30T01:56:04.192125Z","rank":7,"volume":1}],"posts":[{"platform":"mastodon","url":"https://infosec.exchange/@PotatoCrimes/117357421192307031","author":"PotatoCrimes@infosec.exchange","title":null,"snippet":"How Scattered Spider shut down Las Vegas with one phone call, retold with low-poly potatoes 🥔 LinkedIn recon → help-desk impersonation → password + MFA reset → ransomware on 100+ MGM servers. Then Caesars, M&S, the Salesforce vishing wave, and TfL, which is how two of them got…","posted_at":"2026-09-30T01:35:34Z","likes":1}],"elsewhere":[],"window":"7d"}}