DDW Weekly Highlights in November W2
2024.11.21
☑️ S2W DDW Weekly Highlights in November W2
🔍 US Game Developer's Hit Series Source Code Leaked via Email Hack
• The source code for R Corporation's flagship game, G** V, was listed for sale on the hacking forum BreachForums.
• On November 10, a threat actor known as "pyro" claimed to have obtained the latest game version's source code via a hacked internal employee email.
• The leaked files reportedly include sensitive information such as the game's anti-cheat system and development tools, with sample source code and screenshots shared as proof.
• The seller is asking $9,000, and the leaked code could potentially be used to develop paid cheats.
🔍 Pro-Russian Hacktivist Groups Target South Korean Government Websites
• Pro-Russian hacktivist groups, Noname057(16) and Народная CyberАрмия, continued cyberattacks on South Korean government websites via Telegram.
• Since November 4, they have attempted DDoS attacks on websites of the Ministry of National Defense, Ministry of Foreign Affairs, Ministry of Culture, Sports and Tourism, Government24, the National Assembly, and the Seoul Metropolitan Government, sharing screenshots claiming success.
• These groups cite South Korea's support for Ukraine as a reason for their ongoing "#OpSouthKorea" campaign, launched in October.
🔍 MOVEit Exploit Triggers Massive Global Data Breaches
• Posts selling internal data from over 20 major global companies appeared on BreachForums.
• Since November 9, a threat actor known as "Nam3L3ss" has released CSV files containing data from at least 25 companies, reportedly obtained by exploiting vulnerabilities in the MOVEit transfer software discovered in 2023.
• The data includes employee names, email addresses, phone numbers, and department codes. Company A suffered the largest impact, with approximately 2.8 million records exposed.
If you want to read more, follow the newsletter as below and visit S2W Inc. website to contact us.
* The full report is available upon request and for XARVIS subscribers.
Attachments
Threat Analysis Brief Reports
Windows Kernel Vulnerability: CVE-2024-38106, etc.
2024.11.20
Previous
Threat Analysis Brief Reports
Rhysida Ransomware Report
2024.11.22
Next