Logins Stolen From Admin-Backdoored Club Penguin Rewritten Site

guest · Jul 31, 2019

Logins Stolen From Admin-Backdoored Club Penguin Rewritten Site
July 31, 2019
https://www.bleepingcomputer.com/ne...admin-backdoored-club-penguin-rewritten-site/

A disgruntled administrator left in a kids' gaming website a backdoor that enabled hackers to steal login data for a little over 4 million accounts.

On Friday, around 11 PM BST, email addresses, usernames and passwords stored as bcrypt hashes belonging to players of Club Penguin Rewritten (CPRewritten), an independent recreation of Disney's Club Penguin massively multiplayer online game for kids aged 6 to 14, started to seep out from the website's live database.
Resentful admin shuts down the game
The incident occurred because a former administrator, nicknamed Codey, left behind PHP files allowing access to the website's database, a staff member of the game told BleepingComputer. The malicous code was hidden among regular files, to avoid detection.
Click to expand...

Log in or Sign up

Logins Stolen From Admin-Backdoored Club Penguin Rewritten Site

guest Guest

Log in or Sign up

Logins Stolen From Admin-Backdoored Club Penguin Rewritten Site

guest Guest

Useful Searches