A ransomware collective known as "Anubis" asserts that it has obtained detailed blueprints for the Two Kings Casino located in Kings Mountain, NC. The group is poised to make the documents public if the tribe does not pay a ransom.
Aside from the extortion threat, the tribe stated there is no evidence of any interruptions to casino operations or that personal customer information has been breached.
The tribe is presently running a temporary gaming facility as it constructs a $700 million resort set to open in 2026. The hackers are aiming at this new facility.
Dark Web Hazard
Anubis announced on the Dark Web on Wednesday, cautioning the tribe that they had 19 hours to comply. That deadline has now lapsed, and the present circumstances are uncertain.
Trent Troxel, vice president of the Catawba Nation Gaming Authority, asserted in a statement that the plans in question were obsolete drafts showcasing earlier design and construction outlines.
"Although our investigation is ongoing, there is no indication that our network, operations, or customer data have been impacted or that this information was obtained via the Catawba Two Kings Casino network,” said Troxel. “We take the security of customer data very seriously and will continue to diligently investigate.”
As of Thursday, the tribe stated it is not aware of any documents being leaked by the hackers, Troxel mentioned.
Possibly Harmful
The hackers assert that they possess detailed architectural designs, which encompass layouts for the main gaming area, hotel tower, parking spaces, and restricted sections such as vaults, server rooms, camera placements, and staff zones.
This might offer offenders the insights required to strategize and carry out physical invasions or thefts, while comprehensive awareness of surveillance camera placements could allow unlawful acts to remain unnoticed.
Genuine leaked blueprints could significantly harm a project like this, potentially undermining the confidence of stakeholders and financial supporters while attracting regulatory attention, which the Catawba has already experienced extensively.
Who is the god Anubis?
Anubis seems to be a fairly recent ransomware collective, emerging in or about the fourth quarter of 2024. The group has earlier focused on healthcare firms in Australia and Canada, as well as construction firms in Peru and the US.
Two Kings is the newest among a series of tribal casinos targeted by ransomware groups. In the past few months, the same group, Ransomhub, has targeted two casino operators.
Cyberattacks targeting the Lower Sioux Indian Community’s Jackpot Junction Casino in Minnesota and the Sault Ste. Kewadin Casinos of the Marie Tribe of Chippewa Indians in Michigan have significantly disrupted operations.
In a strange turn of events, Ransomhub penned a letter to the Sault Tribe’s local publication The Sault Tribe Guardian to admonish the tribe’s leadership for its unwillingness to cooperate.