Scattered Spider, Alphv, and the MGM hack, explained
MGM’s high-profile hack sheds light on how devastating cyberattacks can be — but who’s responsible?
“Entertaining, informative, keeps you coming back for more...”
MGM’s high-profile hack sheds light on how devastating cyberattacks can be — but who’s responsible?
| Cookie | Duration | Description |
|---|---|---|
| __cf_bm | 30 minutes | This cookie, set by Cloudflare, is used to support Cloudflare Bot Management. |
| Cookie | Duration | Description |
|---|---|---|
| __hssc | 30 minutes | This cookie keeps track of sessions. This is used to determine if HubSpot should increment the session number and timestamps in the __hstc cookie. It contains the domain, viewCount (increments each pageView in a session), and session start timestamp. |
| __hssrc | session | Whenever HubSpot changes the session cookie, this cookie is also set to determine if the visitor has restarted their browser. If this cookie does not exist when HubSpot manages cookies, it is considered a new session. It contains the value "1" when present. |
| __hstc | 6 months | The main cookie for tracking visitors. It contains the domain, utk, initial timestamp (first visit), last timestamp (last visit), current timestamp (this visit), and session number (increments for each subsequent session). |
| _ga | 6 months | The _ga cookie, installed by Google Analytics, calculates visitor, session and campaign data and also keeps track of site usage for the site's analytics report. The cookie stores information anonymously and assigns a randomly generated number to recognize unique visitors. |
| _gat_gtag_UA_58267113_7 | 1 minute | This cookie is set by Google and is used to distinguish users. |
| _gat_UA-58267113-7 | 1 minute | This is a pattern type cookie set by Google Analytics, where the pattern element on the name contains the unique identity number of the account or website it relates to. It appears to be a variation of the _gat cookie which is used to limit the amount of data recorded by Google on high traffic volume websites. |
| _gcl_au | 3 months | Provided by Google Tag Manager to experiment advertisement efficiency of websites using their services. |
| _gid | 1 day | Installed by Google Analytics, _gid cookie stores information on how visitors use a website, while also creating an analytics report of the website's performance. Some of the data that are collected include the number of visitors, their source, and the pages they visit anonymously. |
| _hjAbsoluteSessionInProgress | 30 minutes | This cookie is set by Hotjar. Used to detect the first pageview session of a user. |
| _hjFirstSeen | session | This cookie is set by Hotjar. Identifies a new user’s first session. Used by Recording filters to identify new user sessions. |
| _hjIncludedInPageviewSample | 30 minutes | This cookie is set by Hotjar. Set to determine if a user is included in the data sampling defined by the website limit. |
| _hjIncludedInSessionSample | 30 minutes | This cookie is set by Hotjar. Set to determine if a user is included in the data sampling defined by your site's daily session limit. |
| _hjSession_1955701 | 30 minutes | This cookie is set by Hotjar. Holds current session data. Ensures subsequent requests in the session window are attributed to the same session. |
| _hjSessionUser_1955701 | 1 year | This cookie is set by Hotjar. Set when a user first lands on a page. Persists the Hotjar User ID which is unique to that site. Ensures data from subsequent visits to the same site are attributed to the same user ID. |
| _omappvp | 6 months | The _omappvp cookie is set to distinguish new and returning users and is used in conjunction with _omappvs cookie. |
| _omappvs | 20 minutes | The _omappvs cookie, used in conjunction with the _omappvp cookies, is used to determine if the visitor has visited the website before, or if it is a new visitor. |
| _omra | 6 months | This cookie is set by OptinMonster. Used to store interaction and conversion data for campaigns in conjunction with Revenue Attribution. |
| hubspotutk | 6 months | This cookie keeps track of a visitor's identity. It is passed to HubSpot on form submission and used when deduplicating contacts. It contains an opaque GUID to represent the current visitor. |
| om-wip10afyetrnlu70kibe | 1 month | Used to determine if a visitor has been shown a campaign by the slug |
| sailthru_content | 1 year | This cookie is set by Sailthru. Tracks recent pageviews for all visitors, and can be used to populate a new user profile. |
| sailthru_pageviews | 30 minutes | This cookie is set by Sailthru to tracks the number of page views for each user. |
| sailthru_visitor | 1 year | This cookie is set by Sailthru. The cookie contains an id that is used to identify a user’s pageviews within a session. |
| test_cookie | 15 minutes | The test_cookie is set by doubleclick.net and is used to determine if the user's browser supports cookies. |
| Cookie | Duration | Description |
|---|---|---|
| _clck | 1 year | This cookie is set by Microsoft Clarity. Persists the Clarity User ID and preferences, unique to that site, on the browser. This ensures that behavior in subsequent visits to the same site will be attributed to the same user ID. |
| _clsk | 1 year | This cookie is set by Microsoft Clarity. Connects multiple page views by a user into a single Clarity session recording. |
| _cq_check | Session | This cookie is set by CHEQ AI Technologies. Used to monitor the technical information and use of devices that connect to our website to protect it from malicious traffic. |
| _cq_duid | 3 month | This cookie is set by CHEQ AI Technologies. Used to monitor the technical information and use of devices that connect to our website to protect it from malicious traffic. |
| _cq_suid | Session | This cookie is set by CHEQ AI Technologies. Used to monitor the technical information and use of devices that connect to our website to protect it from malicious traffic. |
| _fbp | 3 months | This cookie is set by Facebook to display advertisements when either on Facebook or on a digital platform powered by Facebook advertising, after visiting the website. |
| _lc2_fpi | 2 years | This cookie is set by LiveIntent. A random, unique, device identifier, stored as a 1st party cookie, to enable targeted advertising |
| _li_dcdm_c | session | This cookie is set by LiveIntent. The domain name where the _lc2_fpi cookie was stored |
| _tt_enable_cookie | 13 months | To measure and improve the performance of your advertising campaigns and to personalize the user's experience (including ads) on TikTok. |
| _tt_sessionId | 13 months | To measure and improve the performance of your advertising campaigns and to personalize the user's experience (including ads) on TikTok. |
| _ttp | 13 months | To measure and improve the performance of your advertising campaigns and to personalize the user's experience (including ads) on TikTok. |
| _twclid | 30 days | This cookie is set by Twitter. It is used for tracking and personalization purposes, such as remembering a user's preferences and activity on the site. |
| _uetsid | 1 day | This cookie is set by Microsoft Advertising. It contains the session ID for a unique session on the site. |
| _uetvid | 13 months | This cookie is set by Microsoft Advertising. UET assigns this unique, anonymized visitor ID, representing a unique visitor. UET stores this data in a first-party cookie. |
| AnalyticsSyncHistory | 1 month | Linkedin sets this cookie. Used to store information about the time a sync took place with the lms_analytics cookie |
| ANONCHK | 10 minutes | This cookie is set by Microsoft Clarity. Indicates whether MUID is transferred to ANID, a cookie used for advertising. Clarity doesn't use ANID and so this is always set to 0. |
| auth_token | 5 years | This cookie is set by Twitter. It is used for authentication purposes, to keep the user logged in to their Twitter account. |
| bcookie | 1 year | This cookie is set by LinkedIn. Browser Identifier cookie to uniquely identify devices accessing LinkedIn to detect abuse on the platform. |
| bscookie | 1 year | This cookie is set by Linkedin. Used for remembering that a logged in user is verified by two factor authentication. |
| cg_uuid | 1 year | Sets a unique ID for the visitor that allows third-party advertisers to target the visitor with relevant advertisements. This pairing service is provided by third-party advertisement hubs, which facilitates real-time bidding for advertisers. |
| CLID | 1 year | Identifies the first-time Clarity saw this user on any site using Clarity. |
| fr | 3 months | Facebook sets this cookie to show relevant advertisements to users by tracking user behaviour across the web, on sites that have Facebook pixel or Facebook social plugin. |
| guest_id | 1 year | This cookie is set by Twitter to identify and track the website visitor. |
| guest_id_ads | 1 year | This cookie is set due to Twitter integration and sharing capabilities for the social media. |
| guest_id_marketing | 1 year | Used to detect whether a user is logged into Twitter. |
| lang | Session | This cookie is set by Linkedin. Used to remember a user's language setting to ensure LinkedIn.com displays in the language selected by the user in their settings. |
| li_gc | 6 months | This cookie is set by Linkedin. Used to store consent of guests regarding the use of cookies for non-essential purposes. |
| lidc | 24 hours | Linkedin sets this cookie. Used To facilitate data center selection. |
| lidid | 2 years | This cookie is set by LiveIntent. A random, unique, device identifier, stored as a 3rd party cookie, used to enable targeted advertising |
| muc_ads | 2 years | Collects data on user behaviour and interaction in order to optimize the website and make advertisement on the website more relevant |
| MUID | 9 months | This cookie is set by Microsoft Advertising. Identifies unique web browsers visiting Microsoft sites. These cookies are used for advertising, site analytics, and other operational purposes. |
| personalization_id | 2 years | This cookie is set due to Twitter integration and sharing capabilities for the social media. |
| SM | session | This cookie is set by Microsoft Clarity. Used in synchronizing the MUID across Microsoft domains. |
| SRM_B | 1 year 24 days | This cookie is set by Microsoft Clarity. Identifies unique web browsers visiting Microsoft sites. |
| UserMatchHistory | 1 month | Linkedin sets this cookie. Used for id sync process. It stores the last sync time to avoid continually repeating the syncing process. |
| X-AB | 1 day | This cookie is set by Snapchat. This is a tool used to combine or change content on the website. This allows the website to find the best variation/edition of the site. |
