Steam, 89 million accounts suspected of being hacked... Valve: "Not a system hack, no breach incident" (comprehensive)
Valve, the operator of the world's largest PC game platform Steam, recently released a statement regarding the suspicion that 89 million users' data was leaked, stating that "this was not a system hack."
Valve, the operator of the world's largest PC game platform Steam, recently released a statement regarding the suspicion that 89 million users' data was leaked, stating that this was not a system intrusion and that account security was not affected
. [Photo = Steam notice capture] On the 15th, Valve explained, "As a result of examining the leaked sample, we have found that the Steam system was not hacked and there were no internal breaches."
Earlier, on the 13th (local time), Israeli security firm Underdark AI caused a stir by revealing that a person claiming to have hacked Steam was distributing 89 million Steam user record data on the dark web for $5,000 (approximately 7.02 million won). Since personal information and payment methods of users are registered within Steam accounts, concerns have been raised that the leaked data could lead to phishing, account hijacking, and targeted attacks.
Valve explained, "The leaked content is a one-time authentication code that was sent in the past and the phone number to which the code was sent," and "Your password, payment information, personal information, and other account-related information are safe."
However, the leak route has not yet been identified. Valve added, "We are currently investigating the source of the leak, and since text messages are not encrypted when sent and are sent through multiple telecommunications companies and intermediaries, it is difficult to trace the leak route." Some point out
that even if this incident did not involve a breach of Steam's servers or account system, we cannot be at ease.
A domestic white hat hacker analyzed, "Steam's servers or account system were not directly hacked, but a structural vulnerability in text authentication was revealed," and "Since only past authentication codes were leaked, the risk of infringement is not high, but there is a possibility of a phishing attack."
He added, "Since the leak route has not been completely identified, periodically checking the security status and utilizing a mobile authenticator would be a realistic response."
https://www.inews24.com/view/blogger/1844707
Valve, the operator of the world's largest PC game platform Steam, recently released a statement regarding the suspicion that 89 million users' data was leaked, stating that this was not a system intrusion and that account security was not affected
. [Photo = Steam notice capture] On the 15th, Valve explained, "As a result of examining the leaked sample, we have found that the Steam system was not hacked and there were no internal breaches."
Earlier, on the 13th (local time), Israeli security firm Underdark AI caused a stir by revealing that a person claiming to have hacked Steam was distributing 89 million Steam user record data on the dark web for $5,000 (approximately 7.02 million won). Since personal information and payment methods of users are registered within Steam accounts, concerns have been raised that the leaked data could lead to phishing, account hijacking, and targeted attacks.
Valve explained, "The leaked content is a one-time authentication code that was sent in the past and the phone number to which the code was sent," and "Your password, payment information, personal information, and other account-related information are safe."
However, the leak route has not yet been identified. Valve added, "We are currently investigating the source of the leak, and since text messages are not encrypted when sent and are sent through multiple telecommunications companies and intermediaries, it is difficult to trace the leak route." Some point out
that even if this incident did not involve a breach of Steam's servers or account system, we cannot be at ease.
A domestic white hat hacker analyzed, "Steam's servers or account system were not directly hacked, but a structural vulnerability in text authentication was revealed," and "Since only past authentication codes were leaked, the risk of infringement is not high, but there is a possibility of a phishing attack."
He added, "Since the leak route has not been completely identified, periodically checking the security status and utilizing a mobile authenticator would be a realistic response."
https://www.inews24.com/view/blogger/1844707
댓글
댓글 쓰기