Mogilvich says, “We have quietly carried out an attack to [sic] Epic Games’ servers, If you are an employee of the company or someone who would like to buy the data, click on me.”They have set a deadline of March 4th for the purchase of the data, but there is no concrete evidence of the data's existence. Given Epic Games' vast storage of payment information through its Game Store and popular titles like Fortnite, the implications of such a breach could be severe.
If you suspect your Epic Games account may be compromised, it's crucial to take immediate steps to secure it. Change your password, enable two-factor authentication if you haven't already, and avoid using the same password across different sites. Taking the time to strengthen your password practices is essential for reducing security risks. Epic Games has not yet commented on the situation, and updates will follow as more information becomes available.
"We are investigating but there is currently zero evidence that these claims are legitimate," an Epic Games spokesperson told Eurogamer this morning.
Mogilievich has not contacted Epic or provided any proof of the veracity of these allegations.
Update: The Mogilevich group has admitted to fabricating a claim about stealing 200 GB of confidential data from Epic Games. The gang initially stated that it had executed this theft but later revealed that no such action was taken. Instead, the group attempted to market this fictitious exploit to other criminal entities, using the fabricated theft as a means to gain attention within the criminal community. This strategy, as described by a group member not involved in the concocted attack and known by the alias Pongo, was part of a broader scheme. In an interview with Cyber Daily, Pongo highlighted that the group does not view themselves as hackers but rather as orchestrators of criminal schemes. The revelation that the hack was a hoax underlines the group's focus on manipulating perceptions rather than conducting actual cyber theft.
Epic Games responded to the initial claims by denying the occurrence of any such breach, emphasizing the lack of evidence to substantiate the supposed attack. This incident underscores the ongoing risks of ransomware threats in the gaming industry, exemplified by past attacks on companies like Insomniac Games, which is renowned for its development of Marvel's Spider-Man. The gaming sector remains a target for cybercriminals seeking to infiltrate company systems and exfiltrate sensitive data.
Source: Readwrite, cyberdaily
