Stolen CD Projekt Red Files Reportedly Sold on Dark Web Auction

Files stolen from CD Projekt Red in a ransomware attack revealed earlier this week have reportedly now been sold in a dark web auction. Dark web monitoring organisation KELA (which previously provided The Verge with what it believes to be legitimate file lists from CD Projekt's Red Engine) reports that an auction set up to sell the files has now been closed after a "satisfying offer" was made from outside of the forum it was being held on. That offer reportedly stipulates that the code will not be distrubuted or sold further. Cybersecurity account vx-underground also reported that it had heard the sale was completed.

Just in: #CDProjektRed AUCTION IS CLOSED. #Hackers auctioned off stolen source code for the #RedEngine and #CDPR game releases, and have just announced that a satisfying offer from outside the forum was received, with the condition of no further distribution or selling. pic.twitter.com/4Z2zoZlkV6

— KELA (@Intel_by_KELA) February 11, 2021

Speaking to IGN, Victoria Kivilevich, a threat intelligence analyst at KELA explained that it appears all of the files stolen – which apparently includes source code for Cyberpunk 2077, multiple versions of The Witcher 3, and Gwent – were sold in a single package. It's unclear who the buyer is, or what they intend to do with the files at time of writing. It's also unclear what price the files were sold for, but reports yesterday indicated an upfront purchase price of $7 million. Kivilevich provided IGN with a translated screenshot of the forum, dated February 10, in which the seller said CD Projekt should pay the 'blitz (upfront purchase fee) because of sensitive data contained in the files. Of course, right now, we can't verify whether that is true. [caption id="attachment_2472150" align="alignnone" width="1336"] A reported screenshot of the now-closed auction thread.[/caption] Developing...

from IGN Articles https://ift.tt/375pQfj