Chinese developers expose data belonging to Android gamers

guest · Aug 26, 2021

Chinese developers expose data belonging to Android gamers
August 26, 2021
https://www.zdnet.com/article/chinese-developers-expose-data-belonging-to-android-gamers/

The Chinese developers of popular Android gaming apps exposed information belonging to users through an unsecured server.

In a report shared with ZDNet, vpnMentor's cybersecurity team, led by Noam Rotem and Ran Locar, revealed EskyFun as the owner of a 134GB server exposed and made public online.
Click to expand...

EskyFun is the developer of Android games including Rainbow Story: Fantasy MMORPG, Adventure Story, The Legend of the Three Kingdoms, and Metamorph M.

On Thursday, the team said that users of the following games were involved in the data leak: Rainbow Story: Fantasy MMORPG, Metamorph M, and Dynasty Heroes: Legends of Samkok. Together, they account for over 1.6 million downloads.
Click to expand...

In total, the team said that an alleged 365,630,387 records contained data from June 2021 onward, leaking user data collected on a seven-day rolling system.

The records included IP and IMEI numbers, device information, phone numbers, the OS in use, mobile device event logs, whether or not a handset was rooted; game purchase and transaction reports, email addresses, EskyFun account passwords stored in plaintext, and support requests, among other data.
Click to expand...

The unsecured server was discovered on July 5 and EskyFun was contacted two days later. However, after receiving no response, vpnMentor made a second attempt on July 27.

Continued silence required the team to also reach out to Hong Kong CERT and the server was secured on July 28.
Click to expand...

vpnMentor: Report: Popular Chinese Android Game Developer Exposes Over 1 Million Gamers to Hacking

The company was using an unsecured server to store vast amounts of data collected from users on its games. Much of this data was incredibly sensitive, and there was no need for a video game company to be keeping such detailed files on its users.

Furthermore, by not securing the data, EskyFun potentially exposed over 1 million people to fraud, hacking, and much worse.
Click to expand...

Log in or Sign up

Chinese developers expose data belonging to Android gamers

guest Guest

Log in or Sign up

Chinese developers expose data belonging to Android gamers

guest Guest

Useful Searches