The hacker responsible for the Riot Games system breach is now attempting to auction off the source codes he stole, with a starting bid of $1 million.
The hacker, who goes by the aliases “Arka” or “ArkaT,” is currently selling the League of Legends source code on a popular site. To verify its legitimacy, the hacker uploaded a PDF file with a list of all the directories and files stolen from Riot Games.
As shown in the PDF, the hacker stole at least 72 GB of data from Riot Games. Arka has also said that he has obtained data from “Packman,” a League of Legends anti-cheat program.
As mentioned in the forum, the hacker is looking for a cheat developer or a rival organization to buy the data. “This is very valuable for cheat developers, it’s a huge game, I’m sure it would be at every advantage for a cheat developer,” he said.
Arka also seems to have notified VX-Underground, a site that monitors cybercriminal activities, that they breached Riot Games via “social engineering” an employee through SMS text messages. This most likely indicates Arka sent the target employee a phishing email that deceived them into giving up their login credentials.
Riot Games has received a ransom email demanding $10 million in order to prevent the stolen data from being leaked. The company is also preparing for a possible increase in cheats in the game: “Since the attack, we’ve been working to assess its impact on anticheat and to be prepared to deploy fixes as quickly as possible if needed,”