Steam server attackers grabbed passwords, credit card data
Posted on 11 November 2011.
As Bethesda Software was preparing to release Skyrim, the latest installment of its mega popular Elder Scrolls series, news that the forum of Steam, the online platform/distibution network of Valve Corporation, have been defaced and possibly breached has made gamers anxious.


The users were alerted to the fact that something was amiss with the appearance of a promoted discussion thread within which a site offering cracks for games was being promoted. Suspicions that the breach went beyond common defacement begun to pop up as users began sharing on the forum that they were receiving spam emails promoting the very same site.

It didn't take long for the company to react and take down the site, but didn't comment on the happenings at first. Even Steam's game servers were taken offline, which alarmed expectant users as they can only play the game online if they have access to the platform.

Fortunately, the game servers were back online in time for today's launching of the game, and an explanation of the situation was finally offered by Valve's co-founder Gabe Newell.

Addressing Steam and Steam Forum users, he confirmed that the forum defacement happened on the evening of Sunday, November 6, and that the intrusion went far beyond that.

"We learned that intruders obtained access to a Steam database in addition to the forums. This database contained information including user names, hashed and salted passwords, game purchases, email addresses, billing addresses and encrypted credit card information," he wrote. "We do not have evidence that encrypted credit card numbers or personally identifying information were taken by the intruders, or that the protection on credit card numbers or passwords was cracked. We are still investigating."

Also confirming that the company is aware only of a few forum accounts having been compromised, he announced that all forum users will be required to change their passwords the next time they log in, and advised those who used that password on other accounts to change it.

He pointed out that to the best of their knowledge, no Steam accounts have been compromised, but suggested to users to consider changing those passwords as well.

"We donít have evidence of credit card misuse at this time. Nonetheless you should watch your credit card activity and statements closely," he finally advised, and said that forums will be opened again as soon as possible.

href="mailto:zeljka.zorz(at)net-security.org">





Spotlight

Most popular Android apps open users to MITM attacks

Posted on 21 August 2014.  |  An analysis of the 1,000 most popular free Android apps from the Google Play store has revealed a depressing fact: most of them sport an SSL/TLS vulnerability that can be misused for executing MITM attacks, and occasionally additional ones, as well.


Weekly newsletter

Reading our newsletter every Monday will keep you up-to-date with security news.
  



Daily digest

Receive a daily digest of the latest security news.
  

DON'T
MISS

Thu, Aug 21st
    COPYRIGHT 1998-2014 BY HELP NET SECURITY.   // READ OUR PRIVACY POLICY // ABOUT US // ADVERTISE //