Riot Games hacked, delays game patches after security breach

guest · Jan 21, 2023

By Sergiu Gatlan @serghei - January 21, 2023

Riot Games, the video game developer and publisher behind League of Legends and Valorant, says it will delay game patches after its development environment was compromised last week.
Click to expand...

The LA-based game publisher disclosed the incident in a Twitter thread on Friday night and promised to keep customers up-to-date with whatever an ongoing investigation discovers.

"Earlier this week, systems in our development environment were compromised via a social engineering attack," the company said.
"We don't have all the answers right now, but we wanted to communicate early and let you know there is no indication that player data or personal information was obtained."
Click to expand...

Riot Games also added that the breach directly impacted its ability to publish patches for its games.

"Unfortunately, this has temporarily affected our ability to release content. While our teams are working hard on a fix, we expect this to impact our upcoming patch cadence across multiple games," Riot Games said.
The development teams behind the League of Legends (LoL) multiplayer online battle arena and Teamfight Tactics (TFT) auto battler games confirmed the incident on Friday.
Click to expand...

guest · Jan 24, 2023

Riot Games receives ransom demand from hackers, refuses to pay
By Sergiu Gatlan @serghei - January 24, 2023

Riot Games says it will not pay the ransom demanded by the attackers responsible for the security breach the company disclosed last week.

"Today, we received a ransom email. Needless to say, we won't pay," the video game publisher and developer said on Tuesday.
"While this attack disrupted our build environment and could cause issues in the future, most importantly we remain confident that no player data or player personal information was compromised."
Click to expand...

The game source code stolen during the security breach also contains some features still waiting to be released, which might not reach the release phase, according to the game developer.

"While we hope some of these game modes and other changes eventually make it out to players, most of this content is in prototype and there's no guarantee it will ever be released," Riot Games said.
Riot Games said it's working with law enforcement and external consultants to investigate the attack and that a full report will be released detailing how its development environment was breached and what measures were taken to prevent this from happening again.
Click to expand...

guest · Jan 25, 2023

New Cheats May Emerge After Riot Games Hack
Phil Muncaster UK / EMEA News Reporter, Infosecurity Magazine - January 25, 2023

A leading US gaming company is primed to respond to any new cheats that may emerge for its titles following a ransomware compromise last week.
Click to expand...

California-based Riot Games said yesterday that it had received a ransom demand, which it would not pay. However, the data taken by its extorters may create problems for the firm in the future if it leads to developers producing cheats for popular games like League of Legends.

The Tencent-owned firm confirmed that source code for League of Legends, Teamfight Tactics and “a legacy anti-cheat platform” were taken by its attackers.

“Truthfully, any exposure of source code can increase the likelihood of new cheats emerging,” Riot Games admitted on Twitter. “Since the attack, we’ve been working to assess its impact on anti-cheat and to be prepared to deploy fixes as quickly as possible if needed.”
The firm added that threat actors also stole source code related to some experimental features.
Click to expand...

guest · Jan 25, 2023

Hackers auction alleged source code for League of Legends
By Lawrence Abrams @LawrenceAbrams - January 25, 2023

Threat actors are auctioning the alleged source code for Riot Game's League of Legends and the Packman anti-cheat software, confirmed to be stolen in a recent hack of the game company's developer environment.
Click to expand...

Last Friday, Riot Games disclosed that its development environment had been hacked, allowing threat actors to steal source code for League of Legends (LoL), Teamfight Tactics (TFT), and the company's Packman legacy anti-cheat platform.

Yesterday, the company confirmed they had received a ransom note from the threat actor and said they would not be paying a ransom. Vice.com obtained this ransom note, which demanded $10 million to prevent the stolen data from going public.
In a conversation with security research group VX-Underground, the threat actors stated they gained access to Riot Game's network after performing a social engineering attack over SMS on one of the company's employees.
Click to expand...

Hacker begin selling stolen source code
Last night, the threat actor behind the attack began selling the alleged source code for League of Legends and the legacy Packman anti-cheat platform on a popular hacking forum.

The threat actor says they are selling the League of Legends source code and Packman for a minimum of $1 million. However, they told BleepingComputer that they would be willing to sell Packman by itself for $500,000.
Click to expand...

The forum post includes a link to a thousand-page PDF document that they claim contains a directory listing of the 72.4 GB of stolen source code. BleepingComputer reviewed this document, and it does appear to be a source code listing for software associated with Riot Games.

While source code makes it easier to find bugs in code, it is also possible to find them using reverse engineering with little cost other than time.
Therefore, only time will tell if this allegedly stolen source code is worth $1 million to cheat developers and other threat actors.
Click to expand...

plat · Jan 25, 2023

Someone reporting being in contact with the Riot Games hacker says among other things: no malware was utilized, just social engineering of an employee (company director) there via SMS.

https://twitter.com/vxunderground/status/1618111681816854529

Rasheed187 · Jan 28, 2023

plat said: ↑

Someone reporting being in contact with the Riot Games hacker says among other things: no malware was utilized, just social engineering of an employee (company director) there via SMS.

https://twitter.com/vxunderground/status/1618111681816854529
Click to expand...

Yes, this is a huge problem since authentication apps don't protect against phishing. So OTP and SMS based 2FA simply isn't good enough. Same goes for anti-phishing software.

Log in or Sign up

Riot Games hacked, delays game patches after security breach

guest Guest

guest Guest

guest Guest

guest Guest

plat Registered Member

Rasheed187 Registered Member

Log in or Sign up

Riot Games hacked, delays game patches after security breach

guest Guest

guest Guest

guest Guest

guest Guest

plat Registered Member

Rasheed187 Registered Member

Useful Searches