{"id":37674,"date":"2020-10-15T17:01:00","date_gmt":"2020-10-15T17:01:00","guid":{"rendered":"http:\/\/db44f9f9-f212-49a5-aa7f-eae192793772"},"modified":"2020-10-15T17:01:00","modified_gmt":"2020-10-15T17:01:00","slug":"ubisoft-crytek-data-posted-on-ransomware-gangs-site","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/ubisoft-crytek-data-posted-on-ransomware-gangs-site\/","title":{"rendered":"Ubisoft, Crytek data posted on ransomware gang’s site"},"content":{"rendered":"

A ransomware gang going by the of Egregor<\/a> has leaked data it claims to have obtained from the internal networks of two of today’s largest gaming companies \u2014 Ubisoft and Crytek.<\/p>\n

Data allegedly taken from each company has been published on the ransomware gang’s dark web portal on Tuesday.<\/p>\n

\"egregor-leak.png\"<\/span>
<\/span> Image: ZDNet <\/span><\/figcaption><\/figure>\n

Details about how the Egregor gang obtained the data remain unclear.<\/p>\n

Ransomware gangs like Egregor regularly breach companies, steal their data, encrypt files, and ask for a ransom to decrypt the locked data.<\/p>\n

However, in many incidents, ransomware gangs are also get caught and kicked out of networks during the data exfiltration process, and files are never encrypted. Nevertheless, they still extort companies, asking victims for money to not leak sensitive files.<\/p>\n

Usually, when negotiations break down, ransomware gangs post a partial leak of the stolen files on so-called leak sites<\/a>.<\/p>\n

On Tuesday, leaks for both Crytek and Ubisoft were posted on the Egregor portal at the same time, with threats from the ransomware crew to leak more files in the coming days.<\/p>\n

<\/section>\n

For the Ubisoft leak, the Egregor group shared files to suggest they were in possession of source code from one of the company’s Watch Dogs games. On its web portal, the group touted they were in possession of the source code for the Watch Dogs: Legion game, scheduled to be released later this month. It was, however, impossible to verify that these files came from the new game, rather than an existing release.<\/p>\n

\"ubisoft-leaked-folder.png\"<\/span>