Riot Games announced on January 21 that its systems had been attacked, confirming that the source code for League of Legends, Genting and an anti-cheat platform had been stolen by the attackers, but there was no indication that player data or personal information had been compromised.
Genting Games also revealed that it had received a $10 million (currently about RMB 67.8 million) ransom email, but it refused to pay the ransom.
According to the latest news obtained by BleepingComputer, after the blackmail was rebuffed, the hackers put the source code of the game “League of Legends” up for auction on a forum, where the source code of “League of Legends” and the anti-cheat platform was auctioned as a package for $1 million (currently about RMB 6.78 million), and the anti-cheat platform was auctioned separately for $500,000 (currently about RMB 3.39 million).
The forum post includes a link to a 1,000-page PDF document that they claim contains a directory listing of 72.4 GB of stolen source code. bleeping computer reviewed the document, which appears to be a list of source code for software related to the boxing game.
In addition, in a conversation with security research group VX-Underground, the hackers said they gained access to the Fist Games network after conducting a social engineering attack on a Fist Games employee via text message.
The hackers claim they accessed Fist Games’ development network for 36 hours until they were detected by the company’s Security Operations Center (SOC). In addition, their goal was to steal the source code of Riot Vanguard, Fist Games’ anti-cheat software.