Help desk social engineering
Attackers call the help desk posing as employees, talk their way into password and MFA resets, and use that account to reach identity systems and launch ransomware across the business.
Las Vegas never closes, and neither do the attackers going after its resorts, casinos and suppliers. We test the help desks and payment systems they target, monitor around the clock and answer our incident line 24/7.
Las Vegas runs on hospitality: resorts and casinos on the Strip and Downtown, the convention business, and the long chain of suppliers, event producers, property managers and service firms that support them. It is a business that handles enormous numbers of card payments, loyalty accounts and guest records, and it operates around the clock. The 2023 attacks on major Strip resorts showed how an attacker can get in with nothing more than a convincing phone call to an IT help desk.
You don’t need to be a resort to be a target. Suppliers and service providers connect to resort systems, hold guest data and move money by email, and attackers use them as stepping stones. StrikeProof helps Las Vegas businesses test the people and processes attackers abuse, monitor their systems 24/7, and prepare for the PCI and gaming requirements that Nevada takes more seriously than most states.
Testing aligned to Nevada gaming cybersecurity rules, help desk and identity hardening, and 24/7 monitoring of guest-facing systems.
Secure connections into resort networks, PCI DSS controls and answers to the security questionnaires operators send.
Protection for ticketing and registration data, secured temporary networks and defense against payment fraud.
HIPAA safeguards for a fast-growing valley’s clinics and wire-fraud defense for rent and closing payments.
Attackers go where the money and the data are. In the Las Vegas Valley, these are the threats we see shaped by the local economy.
Attackers call the help desk posing as employees, talk their way into password and MFA resets, and use that account to reach identity systems and launch ransomware across the business.
Point-of-sale systems, hotel front desks and online booking engines process huge volumes of cards. Skimming malware and compromised payment integrations target all of them.
Player and loyalty accounts hold points, comps and personal data. Attackers use stolen passwords to drain them and sell what they find.
Nevada is one of the few states that requires businesses accepting payment cards to comply with the PCI Data Security Standard by statute, and it requires encryption when personal information is sent outside your secure systems or stored on devices that leave your control. Breaches must be reported to affected residents in the most expedient time possible and without unreasonable delay. Gaming licensees face more: Nevada Gaming Commission rules require covered licensees to run a cybersecurity program, assess their risks and report cybersecurity incidents to the Gaming Control Board. Your attorney should confirm which obligations apply to you.
General information, not legal advice. Confirm your obligations with your attorney.
Offense informs defense. We test like attackers, monitor around the clock, and respond fast, all from one team.
A 24/7 line for Las Vegas businesses facing ransomware, a compromised mailbox or a fraudulent wire. Containment and forensics start remotely within minutes of your call.
Explore incident responseNetwork, web application, cloud and phishing tests that show how an attacker would get in, with a prioritized fix list and a retest.
Explore VAPTAround-the-clock monitoring of your endpoints, cloud accounts and email, so account takeovers and intrusions are caught and stopped early.
Explore SOC & MDRGap assessments, control implementation and audit-ready evidence for the frameworks Las Vegas businesses are held to.
Explore complianceCustomers, regulators and insurers in the Las Vegas Valley increasingly want proof of security, not promises. We map your controls to the frameworks that apply to you and help you produce the evidence.
Our monitoring, testing and incident response are delivered over secure remote connections, so every business in the Las Vegas Valley gets the same team, the same speed and the same pricing, downtown or out in the suburbs.
Book a no‑pressure consultation, or if you’re dealing with an incident right now, call our response line.