In attacking Caesars and MGM, the group tricked a help desk worker into providing access to protected networks and then exploited that access to extort the resort giants. Caesars reportedly paid roughly $15 million to the attackers, the Wall Street Journal reported at the time.