---
title: "Mukaddaskhon Umarova (@hanachan) | Hashnode"
description: "Mukaddaskhon Umarova (@hanachan) writes on Hashnode. Read their latest articles and follow their work."
url: "https://hashnode.com/@hanachan"
---

@hanachan

# Mukaddaskhon Umarova

@hanachan · Incheon, South Korea · Joined October 2026

### [Threat Atlas Lab 01: Building a Failed Login Detection Tool with Python](https://threatatlas.hashnode.dev/threat-atlas-lab-01-building-a-failed-login-detection-tool-with-python?utm_source=hashnode&utm_medium=feed)

This lab project has been built to check and compare the failed login attempts a.k.a "Brute force attack" with Python. It is a beginner friendly and includes clear shown realevidence of the lab

4 min read · [threatatlas.hashnode.dev](https://threatatlas.hashnode.dev/threat-atlas-lab-01-building-a-failed-login-detection-tool-with-python?utm_source=hashnode&utm_medium=feed)

[3](https://hashnode.com/posts/threat-atlas-lab-01-building-a-failed-login-detection-tool-with-python/6ae30dfa77708dd380e8762e) [Oct 29](https://hashnode.com/posts/threat-atlas-lab-01-building-a-failed-login-detection-tool-with-python/6ae30dfa77708dd380e8762e)

### [Inside the MGM Resorts Cyberattack: Social Engineering, Identity Security, and Resilience](https://threatatlas.hashnode.dev/inside-the-mgm-resorts-cyberattack-social-engineering-identity-security-and-resilience?utm_source=hashnode&utm_medium=feed)

In September 2023, MGM Resorts suffered a major cyberattack that disrupted hotel operations, slot machines, digital room keys, and reservations for roughly ten days, costing an estimated $100 million. Attackers linked to Scattered Spider (an ALPHV/BlackCat affiliate) reportedly used LinkedIn reconnaissance and a short vishing call to the IT help desk, impersonating an employee to reset credentials and MFA. This granted access to MGM’s Okta identity platform and Azure environment, enabling escalation and ransomware deployment against ESXi hypervisors. MGM’s SEC filings confirmed the financial impact, system shutdowns for containment, and theft of personal data (names, contact details, dates of birth, driver’s licenses, and limited Social Security/passport numbers) from some pre-March 2019 customers. No payment-card or banking data was taken. The incident underscores critical lessons: harden help-desk verification beyond knowledge-based checks, enforce phishing-resistant MFA, apply least privilege and identity segmentation, monitor for anomalous identity changes, and strengthen incident response. Identity has become the primary attack surface; a single procedural gap can cascade into enterprise-wide operational failure.

9 min read · [threatatlas.hashnode.dev](https://threatatlas.hashnode.dev/inside-the-mgm-resorts-cyberattack-social-engineering-identity-security-and-resilience?utm_source=hashnode&utm_medium=feed)

[Oct 20](https://hashnode.com/posts/inside-the-mgm-resorts-cyberattack-social-engineering-identity-security-and-resilience/6ad7035f3df814c17e815622)

### [Why I'm Building Threat Atlas: Learning Cybersecurity in Public](https://threatatlas.hashnode.dev/why-i-m-building-threat-atlas-learning-cybersecurity-in-public?utm_source=hashnode&utm_medium=feed)

An independent cybersecurity research and learning journal.

5 min read · [threatatlas.hashnode.dev](https://threatatlas.hashnode.dev/why-i-m-building-threat-atlas-learning-cybersecurity-in-public?utm_source=hashnode&utm_medium=feed)

[Oct 19](https://hashnode.com/posts/why-i-m-building-threat-atlas-learning-cybersecurity-in-public/6ad5fa1a251891f91f37c7b9)