Hacker says company lies about secure account information, steals names and passwords to prove it.
A disgruntled player of popular MMO Runes of Magic is holding the game's roughly 3.5 million account holders hostage. User "Augustus87" hacked publisher Frogster's servers last week and is threatening to publish every user account name and password unless a lengthy list of demands is met.
Spotted by Kotaku, Augustus87 posted a message (since removed) on the Runes of Magic forums on Thursday, accusing the free-to-play MMO's Berlin-based western publisher of lying to its players and failing to secure its servers and game clients.
Spotted by Kotaku, Augustus87 posted a message (since removed) on the Runes of Magic forums on Thursday, accusing the free-to-play MMO's Berlin-based western publisher of lying to its players and failing to secure its servers and game clients.
"YOU DECLARED WAR TO THE PUBLIC, YOUR CUSTOMERS, AND YOUR EMPLOYEES. YOU WANTED WAR. YOU ARE CLOSE TO GET IT!" Augustus87 wrote (yes, in all caps).
He then posted the details of more than 2,000 accounts on the forum and threatened to release the account names and passwords of 1,000 Runes of Magic players every day on Frogster web sites and bulletin boards unless the following demands are met within two weeks:
1. No closed threads on Runes of Magic boards.
2. No deleted threads.
3. Better treatment of Frogster employees worldwide.
4. More transparency with customers.
5. Secure game clients against cheating and modding.
6. Protect personal info.
7. Stop spying on your employees.
In addition, Augustus87 threatened to increase the number of compromised accounts he posts if his message is removed -- which Frogster promptly did. In a response posted on the Runes of Magic forums, Frogster claims Augustus87 was only able to obtain "outdated log-in data from 2007, long before our comprehensive password reset initiative." The publisher also called the attack and threats a "serious criminal offense" and said it has pressed charges with German law enforcement.
In closing, Frogster assured its account holders any danger has been averted. Augustus87 has not been heard from since the original messages he posted on the 13th.
1. No closed threads on Runes of Magic boards.
2. No deleted threads.
3. Better treatment of Frogster employees worldwide.
4. More transparency with customers.
5. Secure game clients against cheating and modding.
6. Protect personal info.
7. Stop spying on your employees.
In addition, Augustus87 threatened to increase the number of compromised accounts he posts if his message is removed -- which Frogster promptly did. In a response posted on the Runes of Magic forums, Frogster claims Augustus87 was only able to obtain "outdated log-in data from 2007, long before our comprehensive password reset initiative." The publisher also called the attack and threats a "serious criminal offense" and said it has pressed charges with German law enforcement.
In closing, Frogster assured its account holders any danger has been averted. Augustus87 has not been heard from since the original messages he posted on the 13th.
0 Comments:
Post a Comment