In a tweet, vx-underground says that an unknown threat actor told them that they breached Ubisoft on December 20th. Once inside the company’s systems, they said they planned to exfiltrate around 900GB of data.
Source
Ubisoft security breached, over 900GB stolen
- Thread starter John Elden Ring
- Start date
In a tweet, vx-underground says that an unknown threat actor told them that they breached Ubisoft on December 20th. Once inside the company’s systems, they said they planned to exfiltrate around 900GB of data.
Source
They will find a file called:
Copy-paste-for-new-game.template
Copy-paste-for-new-game.template
Let's see what spicy stuff will come up.
In a tweet, vx-underground says that an unknown threat actor told them that they breached Ubisoft on December 20th. Once inside the company’s systems, they said they planned to exfiltrate around 900GB of data.
Source
How many harassments cases they buried etc..
Leaked Games
1. AC Japan
2. AC Aztecs
3. AC Mayans
4. AC Neardenthals
5. AC Dinosaurs
You've made me actually interested in this leaking now
Well... Until we find out there is no info lol
These hackers are out of control, they are just rampant.
Amazing how Microsoft escapes all the time though.
Amazing how Microsoft escapes all the time though.
Publishers are stupid?
They saw others and did nothing to secure their own data.
That is amateurism.
Put 2 factor authentications.
Control who access your files.
If you see any weird access (AI exist for that… for example a access from a user in a different time he use to access) send a message to check and see if it an authorized access.
Have a easy go offline option… if any suspicious access is happening turn everything offline until you check and deal with it.
There is no way a hacker will download 1TB of data without you get alerts from suspicious actions if you implemented proper IT security.
Plus 2 factor authentication via phone app requires the hacker to access your phone that is another level of difficult to the hacker.
They saw others and did nothing to secure their own data.
That is amateurism.
Put 2 factor authentications.
Control who access your files.
If you see any weird access (AI exist for that… for example a access from a user in a different time he use to access) send a message to check and see if it an authorized access.
Have a easy go offline option… if any suspicious access is happening turn everything offline until you check and deal with it.
There is no way a hacker will download 1TB of data without you get alerts from suspicious actions if you implemented proper IT security.
Plus 2 factor authentication via phone app requires the hacker to access your phone that is another level of difficult to the hacker.
Last edited:
You can not like but it works pretty well.
To access the files the hacker will need to access an employee phone first.
I will say more implement private VPN with 2Factor authentication too… another level.
We can hate Microsoft in gaming.
But they do implement proper security in their products… the could Azure and Office tools have several layers of security… their MFA (multi authentications is probably the best one in the market), you can configure access by role or file by file… yeap you can configure individual access (only that person can access that single file).
You can configure private VPN or only allow access thought your own company network… it continue on the Cloud but any place outside your network will not even show your domain (Error 404).
That's what they got for putting their games on PC right guys?
Care to explain.
I work in a company that strong support MFA to all ours clients.
Maybe bad configured MFA is open to security problems.
You probably are talking about SMS or voice-based MFA that nobody uses nowdays… for example Push MPA notifications doesn’t have the security issues or SMS or voice-based.
Push notification with number matching goes a level higher in security.
Last edited:
MS suffered by far the worst leaks of all this year. Also they're hacked constantly:
Lapsus$ hackers leak 37GB of Microsoft's alleged source code
The Lapsus$ hacking group claims to have leaked the source code for Bing, Cortana, and other projects stolen from Microsoft's internal Azure DevOps server.
They got access to an account with unlimited access… another big L to Microsoft.MS suffered by far the worst leaks of all this year. Also they're hacked constantly:
Lapsus$ hackers leak 37GB of Microsoft's alleged source code
The Lapsus$ hacking group claims to have leaked the source code for Bing, Cortana, and other projects stolen from Microsoft's internal Azure DevOps server.www.bleepingcomputer.com
That come to the point why an account have unlimited access? An account should have access only to what it needs… never the full access.