Blog Details

sezer66 – stock.adobe.com

Cybersecurity expert The infamous ShinyHunters hacking collective menaces video game publisher Rockstar and says this is in a position to leak knowledge on 14 April

UK-basically basically based Rockstar Video games, publisher of the lengthy-running Big Theft Auto (GTA) sequence, has fallen victim to 1 other cyber attack orchestrated by the ShinyHunters operation, which is now threatening to liberate a trove of recordsdata on 14 April 2026 after its extortion requires had been rebuffed.

In step with knowledge obtained from ShinyHunters’ sad web leak space, the crowd exploited synthetic intelligence (AI) cloud analytics tool Anodot to earn admission to Rockstar’s Snowflake knowledge warehouse the use of stolen authentication tokens, thus appearing to Snowflake and Rockstar as within the event that they had been a real inner user.

Anodot had experienced a sequence of points earlier this month that ended in Amazon S3, Kinesis and Snowflake streams being unable to retrieve knowledge samples for a time.

Rockstar advised gaming news web space Kotaku: “We are in a position to verify that a puny quantity of non-field materials company knowledge was accessed in reference to a third-celebration knowledge breach. This incident has no impact on our organisation or our avid gamers.”

ESET global cyber security adviser Jake Moore stated: “Third-celebration cloud providers continue to be a pivotal fragment of the attack chain and it acutely highlights how low the barrier to high-impact cyber crime has develop to be. Compromising lesser-known suppliers stays one of many weakest hyperlinks into larger brands and it would possibly well well perhaps have larger success. Even non-identifiable knowledge caught up in a knowledge breach can easy be stitched collectively for phishing or social engineering, so it is crucial that companies are better aware of their suppliers and their security insurance policies.

“Gaming giants will continuously remain high-price targets no longer precise for stolen knowledge but for kudos amongst criminal stare groups and within the waste leverage. It is therefore crucial for companies to lock down all third-celebration earn admission to and repeatedly treat it as a real menace,” stated Moore.

Cybersecurity expert Serial victim?

Right here’s the most standard in a sequence of breaches and cyber incidents to have hit Rockstar – most famously, the Lapsus$ gang, a gaggle with connections to ShinyHunters, leaked footage from an early version of GTA 6, which is determined for liberate later this year, aid in September 2022. A year later, a trailer for the unpublished video game moreover leaked on social media platform X (formerly Twitter), forcing the builders to switch up their promotional schedule.

The person on the aid of the 2022 hack, a British man named Arion Kurtaj – who was easy a minor on the time – pulled off this breach after inveigling his intention into an inner Slack chat at Rockstar.

It later emerged that Kurtaj had been arrested by City of London Police earlier that year in reference to other Lapsus$ cyber assaults. Nonetheless, whereas in protective custody at an Oxfordshire Travelodge, he skirted a ban on the use of the web imposed as fragment of his bail conditions by connecting an Amazon Fireplace Stick with the TV in his resort room and went on to hack Rockstar and slouch-sharing provider Uber, amongst others.

Kurtaj, who is autistic, was ruled liable for the hacking spree at Southwark Crown Courtroom in 2023. Jurors heard how he had expressed his intention to return to cyber crime, and became violent whereas in custody. He is for the time being serving an indefinite sentence at a real properly being facility, the attach he’ll remain unless doctors mediate him no longer to be a hazard to the public.