The attackers behind the recent attack on Riot Games have announced that they are auctioning off the source code used by some of the company’s most famous games.
The company behind one of the world’s most popular MOBA games, League of Legends (LoL), recently confirmed that it had received a ransom note for stolen source code, but publicly announced that it has zero willingness to pay.
The crooks demanded $10 million in exchange for the stolen material, reports said.
high price auction
During the breach, which allegedly lasted 36 hours, the attackers managed to obtain the source code for League of Legends (LoL), Teamfight Tactics (TFT), and Packman — a traditional anti-cheat solution.
The incident forced Riot to delay some upcoming patches for the game, but said otherwise – no harm was done and user data is safe.
After the ransom offer was strongly rejected, the crooks took to a “popular hacking forum” and put the data up for auction.
The LoL source code and Packman will be auctioned off for at least $1 million. BleepingComputer found that Packman himself was quoted at $500,000.
Attached to the forum advertisement is a PDF file containing a directory listing of the 72.4GB of stolen source code. The document itself is said to be approximately 1,000 pages long. While the media did have the document, it is currently difficult to confirm its authenticity.
Given the price tag, it’s safe to assume that the attacker believes the source code is valuable.
It was previously reported that these data can be used to make game cheats, allowing some people to gain the upper hand in battle. Whether that’s enough to warrant a $1 million price tag remains to be seen. BleepingComputer also said the source code could be used to create malware that could execute code on the player endpoint (opens in a new tab),Remotely.
“To be honest, any source code exposure increases the likelihood of new cheats appearing,” Riot said. “Since the attack occurred, we have been working hard to assess its impact on anti-cheat and prepare to deploy fixes as soon as possible if needed”
pass: Beep computer (opens in a new tab)