Sunday, September 29

Epic Games: hackers stole more than 200 GB of user personal data

Julián Castillo's avatar

By Julian Castillo

01 Mar 2024, 18:59 PM EST

A bold new group of cybercriminals, calling themselves ‘Mogilevich’, has burst onto the digital landscape with alarming statements. They claim to have carried out attacks against important entities, including the renowned video game company Epic Games and the Department of Foreign Affairs of the Republic of Ireland. However, what makes these claims even more disturbing is the nature of the data that claim to have obtained: over 200GB of sensitive information, including emails, passwords, payment information and, even more worrying, some of the Epic Games source code.

A company’s source code is the heart of its digital operation, the backbone of its technology and, in many cases, the crown jewel of its intellectual property. It contains detailed instructions on how your applications and systems work, which means its disclosure can have catastrophic consequences.

Access to source code gives cybercriminals an inside view of the affected company’s software architecture. This allows them to identify potential vulnerabilities and weak points in the system, paving the way for more sophisticated and devastating attacks in the future. Additionally, possession of the source code can facilitate the creation of targeted malware and targeted attacks designed to exploit weaknesses in the compromised company’s software.

What did Mogilevich say?

Statements by the hacker group known as ‘Mogilevich’ have sent shockwaves through the digital world. With unparalleled audacity, the group has openly proclaimed its responsibility for the attacks, defying authorities and sparking panic among its alleged victims. Their statement, spread on the dark web, is a grim reminder of the growing threat posed by cybercriminals in today’s landscape.

In his statements, Mogilevich not only takes credit for the attacks, but also proudly displays the loot obtained. The list of compromised data is alarming: emails, passwords, payment information, and even a portion of Epic Games’ coveted source code. This brazen display of cyber might not only seeks to intimidate its alleged victims, but also attract the attention of potential buyers on the digital black market.

The language used by the group is provocative and challenging, reflecting a ruthless and unscrupulous mentality. Their implicit threats to make stolen data public if their demands are not met are an intimidation tactic designed to instill fear and coercion. However, the lack of response from alleged victims, such as Epic Games, suggests that authorities and affected companies are taking a firm stance against cyber blackmail.

Mogilevich’s statements are a wake-up call for governments, companies and individual users alike. The cyber threat is real and omnipresent, and complacency is not an option. It is imperative that concerted measures be taken to protect digital infrastructure, strengthen laws and regulations related to cybersecurity and promote awareness and education about cyber risks. Only through a joint and coordinated effort can we hope to confront this growing threat and safeguard our digital security.

Keep reading:
– Fortnite maker Epic Games to pay $520 million after agreeing to expose children to potential harm
– Disney and Epic Games reach an unprecedented agreement to create a video game universe
– What the judicial victory of Epic Games vs Google implies