Cyber Risks · Krebs on Security

Anonymous Splinter Group Implicated in Game Company Hack

Summary: The Eidos Interactive and Deus Ex websites were defaced with a banner reading "Owned by Chippy1337" and taken offline for several hours, with attackers downloading roughly 9,000 resumes from Eidos and claiming to have stolen data on at least 80,000 Deus Ex users. KrebsOnSecurity obtained chat logs in which hackers using the aliases ev0 and nigg discussed the break-in and leaking source code, and an observer said the group obtained the 0day from one person, had a 17-year-old UK hacker known as Ryan or Blackhatcat execute it, then stole the database and pinned the defacement on him.

Key Takeaway: The attackers here were not a disciplined unit but a faction that obtained its 0day from one member, used another to run it, then doxed and framed each other - and still walked off with data on 80,000 users and 9,000 resumes, which is the exposure your organization inherits regardless of who inside the group gets blamed.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related