Threat actors are auctioning the alleged source code for Riot Game’s League of Legends and the Packman anti-cheat software, confirmed to be stolen in a recent hack of the game company’s developer environment.
Last Friday, Riot Games disclosed that its development environment had been hacked, allowing threat actors to steal source code for League of Legends (LoL), Teamfight Tactics (TFT), and the company’s Packman legacy anti-cheat platform.
Yesterday, the company confirmed they had received a ransom note from the threat actor and said they would not be paying a ransom. Vice.com obtained this ransom note, which demanded $10 million to prevent the stolen data from going public.
In a conversation with security research group VX-Underground, the threat actors stated they gained access to Riot Game’s network after performing a social engineering attack over SMS on one of the company’s employees.
The threat actors claimed that they had access to the development network for thirty-six hours until they were detected by the company’s security operations center (SOC).
They told VX their goal was to steal the source code for Riot Vanguard, the game company’s anti-cheat software.