Data CD Projekt Red is for sale online
Hackers, who have targeted video game developer CD Projekt Red with a ransomware attack, are trying to sell stolen source code they obtained through an auction of millions of dollars.
The hack included important code related to high-profile releases, such as: The Witcher 3 and Cyberpunk 2077.
CD Projekt Red said:
She does not intend to negotiate with the hackers, even if that means that material stolen from the hack is starting to spread online.
Leaks of potentially correct source code information are starting to appear across forums, as reported on Twitter by the vx-underground cybersecurity account.
CD Projekt Red's ransomed data has been leaked online. pic.twitter.com/T4Zzqfn78F
— vx-underground (@vxunderground) February 10, 2021
This initial leak is believed to include Gwent's source code, while vx-underground revealed that auctions for the most valuable source code were taking place on the hacking forum known as Exploit.
But a cybersecurity company called KELA, which specializes in providing threat intelligence to companies based on analyzes of dark websites and communities, says it has reason to believe its auctions contain valid data.
And she said:
We believe this is a real auction from a real-time seller who has access to the data, where the seller offers to use a guarantor and only those with a deposit are allowed to participate, a tactic many sellers use to show that they are serious and to ensure that fraud does not occur.
KELA added:
Our threat intelligence analyst, Victoria Kivilevich, was able to download some information that was provided to her by someone claiming to be participating in auctions.
Kevelvitch believes the data is original, and said the auction offers source code for both Red Engine and CDPR releases, including The Witcher 3: Wild Hunt, Thronebreaker: The Witcher Tales spinoff and Cyberpunk 2077.
The stolen materials are also believed to contain internal documents, although it is not clear what types of documents or additional materials the hackers have.
The initial auction price is $ 1 million, KELA says, with bids increasing in increments of $ 500,000 and the purchase price now $ 7 million.
Users who deposit 0.1 Bitcoin can only participate, which is why Kavellevich believes that hackers are serious about hosting the auction and that the items for sale are likely to be correct as it guarantees that no one participating in the auction will attempt to deceive the sellers.
