Feeds

DON'T PANIC! No credit card details lost after hackers crack world's largest casino group

Las Vegas Sands email and website still down after hackers trash CEO Sheldon Adelson

Beginner's guide to SSL certificates

IT administrators at the Las Vegas Sands casino are having a tough time restoring their systems after hackers successfully got inside the corporation's firewall, but it appears that the most valuable sections of the network are safe, according to the Nevada Gaming Control Board.

Board chairman A.G. Burnett told Associated Press that the credit card database of customers at the world's largest gambling chain is secure, and that the integrity of the gambling systems run by the chain hasn't been breached, so no Ocean's 11–style antics are expected.

The problems for the casino started on Monday when the attackers took control of the company's website and posted an image of the consortium's US casinos in flames, along with a picture of CEO Sheldon Adelson with Israeli Prime Minister Benjamin Netanyahu and the message "Damn A, don't let your tongue cut your throat. Encouraging the use of weapons of mass destruction, under any conditions, is a crime."

Hackers deface the Las Vegas Sands website

Hardly a well-designed website

More worryingly, the hackers also added a scrolling list of employees, their email addresses, some social security numbers, and other identifying information. The Sands website is still down and a spokesperson confirmed to El Reg that the email systems still haven't been switched back on.

"While we have been able to confirm that certain core operating systems were not impacted by the hacking, the company remains focused on working through a step-by-step process to ascertain what, if any, additional systems may have been impacted," Sands spokesman Ron Reese said in a reported statement.

At first sight this looks like a politically motivated attack against Sheldon Adelson, the billionaire CEO of the Sands group. Adelson's biography reads like a Horatio Alger myth: the son of poor Ukrainian immigrants who became the ninth richest man in the world, and he's known in the technology industry as the founder of the COMDEX trade show, which he sold in 1995 for $862m.

Adelson also donates millions to American political campaigns – almost exclusively to the Republican Party and its candidates – and is somewhat outspoken on foreign policy issues in the Middle East. The hacker's message presumably refers to a comment he made suggesting the US should explode a nuclear weapon over uninhabited Iran's land as a precursor to negotiations over its nuclear program – a comment he later dismissed as hyperbole.

Defacing a website isn't too hard, and usually has minimal effect on the owners, but the fact that internal systems were broken into to is cause for concern. Seemingly innocuous hacking or DDoS attacks have been used in the past to mask deeper penetrations in the past, and computer forensics teams will be scouring through server logs to find out exactly what happened.

Nevada gaming officials are investigating the attack at the moment, and the FBI is also reported to be looking into the case. Neither was available for comment at time of going to press. ®

Remote control for virtualized desktops

More from The Register

next story
Regin: The super-spyware the security industry has been silent about
NSA fingered as likely source of complex malware family
Why did it take antivirus giants YEARS to drill into super-scary Regin? Symantec responds...
FYI this isn't just going to target Windows, Linux and OS X fans
Privacy bods offer GOV SPY VICTIMS a FREE SPYWARE SNIFFER
Looks for gov malware that evades most antivirus
Patch NOW! Microsoft slings emergency bug fix at Windows admins
Vulnerability promotes lusers to domain overlords ... oops
HACKERS can DELETE SURVEILLANCE DVRS remotely – report
Hikvision devices wide open to hacking, claim securobods
'Regin': The 'New Stuxnet' spook-grade SOFTWARE WEAPON described
'A degree of technical competence rarely seen'
Home Office: Fancy flogging us some SECRET SPY GEAR?
If you do, tell NOBODY what it's for or how it works
Syrian Electronic Army in news site 'hack' POP-UP MAYHEM
Gigya redirect exploit blamed for pop-rageous ploy
prev story

Whitepapers

Seattle children’s accelerates Citrix login times by 500% with cross-tier insight
Seattle Children’s is a leading research hospital with a large and growing Citrix XenDesktop deployment. See how they used ExtraHop to accelerate launch times.
Forging a new future with identity relationship management
Learn about ForgeRock's next generation IRM platform and how it is designed to empower CEOS's and enterprises to engage with consumers.
How to determine if cloud backup is right for your servers
Two key factors, technical feasibility and TCO economics, that backup and IT operations managers should consider when assessing cloud backup.
High Performance for All
While HPC is not new, it has traditionally been seen as a specialist area – is it now geared up to meet more mainstream requirements?
Business security measures using SSL
Examines the major types of threats to information security that businesses face today and the techniques for mitigating those threats.