Anonymous hacks Eidos - Deus Ex: HR source code being leaked?

[Mael Duin]

http://krebsonsecurity.com/2011/05/a...-company-hack/

The Web sites for computer game giant Eidos Interactive and one of its biggest titles — Deus Ex– were defaced and plundered on Wednesday in what appears to have been an attack from a splinter cell of the hacktivist group Anonymous. The hack comes just days after entertainment giant Sony told Congress that Anonymous members may have been responsible for break-ins that compromised personal information on more than 100 million customers of its PlayStation Network and other services.

The defacement message left on deusex.com.

For several hours early Thursday morning, the Deus Ex Web site, user forum, and Eidos.com were unreachable. For a brief period late Wednesday evening, the sites displayed a defacement banner that read “Owned by Chippy1337″ (click screen shot at right for a larger version), along with several names and hacker handles of those supposedly responsible for the break-in.

KrebsOnSecurity.com obtained an archived copy of the attackers’ online chatter as they were covering their tracks from compromising the sites. A hacker using the alias “ev0″ discusses having defaced the sites and downloading some 9,000 resumes from Eidos. ev0 and other hackers discuss leaking “src,” which may refer to source code for Deus Ex or other Eidos games. In a separate conversation, the hackers also say they have stolen information on at least 80,000 Deus Ex users and that they plan to release the data on file-sharing networks.

Neither Eidos nor its parent company Square Enix Co. could be immediately reached for comment. (This may not be the first time Eidos was breached: In a story I wrote earlier this year, I detailed how hackers on an underground criminal forum claimed to be selling access to Eidos’ customer database).

The attack seems to have been engineered by a faction of the hacker collective that recently seized control over Internet relay chat (IRC) channels previously used by Anonymous to help plan and conduct other, high-profile attacks. According to several news sites which covered that coup, the Anonymous control networks were taken over by a 17-year-old hacker from the United Kingdom who uses the handle “Ryan,” (shown in the chat conversation included below using the nickname “Blackhatcat”).

Also in the channel discussing the defacement and theft of the Deus Ex database are hackers “ev0,” “nigg” and “e”, screen names of Anonymous sympathizers who have been connected with Ryan’s recent coup. But according to one observer who’s been monitoring the Anonymous faction’s activities, this Anonymous splinter group appears to be splintering as well, turning on each other and framing one another for this latest attack. In the defacement message left on Eidos.com, ev0 and nigg finger Ryan in the hack, even using his supposed real name (Ryan Cleary). According to reporting by Ars Technica, Anonymous organizers angry over Ryan’s activities recently “doxed” him — publishing documents including his full name, home address, phone number and Skype handle, among other details.

“ev0 and nigg got the 0day they used to break in [to Eidos.com] from one guy, then got Blackhatcat to execute it and then screwed everyone, stole the database,” said the observer, who asked not to be named for fear of retribution from the hackers. “This is how those guys roll: One day they work together, the next they war. They drop dox on each other like it’s a game. Just like they did pinning the defacement of Dues Ex on Blackhatcat. Then denied the whole thing. Its psychotic behavior like I have never seen. Its like they hate each other but will work together on certain ops if it suits them, but then might turn on each other in the end…and then laugh it off.”

As an illustration of the above-described dynamic, a snippet of the chat conversation between ev0 and nigg discussing what to do with the Deus Ex Web site and data is pasted below. (WARNING: some of the text below contains strong language that may be offensive to readers):

[16:06] <ev0> we should put 0day
[16:06] <ev0> or exploits
[16:06] <ev0> in the pdf
[16:06] <ev0> and see if someone logs in
[16:06] <ev0> we will use a RAT
[16:06] <ev0> that will be the payload
[16:07] <ev0> one thing that would be funny
[16:07] <ev0> i write a nasty virus
[16:07] <ev0> that will bsod on startup
[16:07] <ev0> **** up all your drivers
[16:07] <ev0> delete tons of files
[16:07] <ev0> forkbom on start
[16:07] <ev0> etc
[16:08] <ev0> we put that in an exploit kit
[16:08] <ev0> on the main page
[16:08] <ev0> there security will be responsible
[16:08] <ev0> for like
[16:08] <ev0> thousands of ****ed up computers
[16:08] <ev0> and it would make the news
[16:08] <ev0> n`
[16:09] <@n`> no
[16:09] <@n`> wont work
[16:09] <@n`> be serious
[16:09] <@n`> this is srs biz
[16:09] <ev0> i am serious
[16:09] <ev0> oh we wil lget ****ed
[16:09] <@n`> more like
[16:09] <@n`> where do we get the 0day from
[16:09] <@n`> who writes the virus
[16:09] <@n`> tests it etc
[16:09] <@n`> fyi
[16:09] <ev0> an exploit kit
[16:10] <@n`> i vote for
[16:10] <@n`> defacing this right now
[16:10] <ev0> alright
[16:10] <ev0> im game
[16:10] <ev0> wanna make a deface page
[16:10] <ev0> make one with #krack
[16:10] <ev0> and leak the src
[16:10] <ev0> in a torrent
[16:10] <ev0> and we’ll make a twitter
[16:10] <ev0> and link it to the page
[16:11] <@n`> no
[16:11] <@n`> dont link it to krak
[16:11] <@n`> baadddd idea
[16:12] <@n`> make a deface page pointing @ xero
[16:12] <@n`> with personal info
[16:12] <@n`> or someone else you dont like
[16:12] <@n`> “This hack was brought to you by X\
[16:12] <@n`> ya i got them all here
[16:13] <ev0> is the lfi patched
[16:13] <ev0> and the box secured
[16:13] <ev0> we’re going to get ddos
[16:13] <@n`> no
[16:13] <@n`> too much effort
[16:13] <@n`> i cleared the logs
[16:13] <ev0> we put it in the name of chippy1337
[16:13] <ev0> and direct it to irc.ddosing.eu #808
[16:13] <ev0> and write the names
[16:14] <ev0> ryan, dfs, xero, nikon, xix, venuism
[16:14] <ev0> and evilhom3r
[16:14] <@n`> YES
[16:14] <@n`> *yes
[16:14] <ev0> lol
[16:14] <@n`> and call out their dox if we have it
[16:14] <@n`> add some skiddy ****
[16:14] <@n`> idk
[16:15] <@n`> make it look funny
[16:15] <ev0> we can put ryans dox
[16:15] <ev0> kayla said she was gonna get xeros dox
[16:15] <ev0> hmm
[16:15] <ev0> we put Ryan Cleary
[16:15] <ev0> Ryan King
[16:15] <ev0> Xero aka Ryan King
[16:15] <ev0> Ryan Cleary
[16:15] <ev0> like that
[16:16] <@n`> ya
[16:16] <ev0> 16:16 &ev0 • http://deusex.com
[16:16] <ev0> 16:16 &ev0 • look at it now
[16:16] <ev0> 16:16 &ev0 • because it will be different later…
[16:16] <ev0> said that in their irc
[16:17] <ev0> this is the ultimate troll

Anyone interested in reading more can see the entire conversation at this Pastebin link.

Anonymous has officially denied being responsible for the Sony breaches. Meanwhile, the Financial Times reports that two veterans of Anonymous have acknowledged that members of the cyber-activist group are likely to have been behind the recent hacking attacks on Sony, in spite of the group’s official denials.

Anonymous has been around in various forms for many years, but it vaulted into the international spotlight last year when it leaped to the defense of WikiLeaks, after the latter came under fire for posting secret government documents. It is worth noting that Anonymous seems to be in a state of conflict at a time when Wikileaks appears to be trying to discourage disloyalty among its own sympathizers. A story Wednesday by New Statesman reporter David Allen Green reveals that Wikileaks founder Julian Assange now makes his associates sign a nondisclosure agreement that asserts that the organization’s huge trove of leaked material is ‘solely the property of WikiLeaks,’ and that anyone who violates this agreement by leaking the organization’s unpublished material is subject to penalties of up to 12 million British pounds– nearly $20 million.

[Sufi]

Is it just me or the hackers don't sound American sometimes. Yes, I know they're international, just making an observation. They sound Aussie or Brit (or around brit regions).

I mean, who says "skiddy" anyway?

[rbrtchng]

IT'S ALL EIDOS'S FAULT!!!

Come on trolls, where are you?

[TEJ2025]

IT'S ALL EIDOS'S FAULT!!!

Come on trolls, where are you?

[Thorzilla]

Oh yeah, now they're fighting the unfairness of Eidos since they won't give them back OtherOS. Bunch of attention whores. Who said they don't deserve a life in jail? **** that, let them drop their soap serving life and have Jamal leave their asses like the japanese flag.

Mother****ers.

[Mael Duin]

Oh yeah, now they're fighting the unfairness of Eidos since they won't give them back OtherOS. Bunch of attention whores. Who said they don't deserve a life in jail? **** that, let them drop their soap serving life and have Jamal leave their asses like the japanese flag.

Mother****ers.

According to some sources (trustful? Don't know) there are "leaders" in the ranks of Anonymous and they didn't give a **** about OtherOS or freedom of speech or anything. They just did OpSony so they could become famous. I'm pretty sure this is no different.

[reasonable_doubt]

that wat they get for taking away OtherOS. I mean we should be allowed to do whatever we want with a game that hsn't even released yet. How dare they say we can't run CFW on Deus Ex:HR, I want to play Super Mario inside Deus EX:HR dammit!!!

god bless these freedom fighter!
May the power of the Hot Pocket be with u!

[DreDayDetox]

Well done Anon, you really do live up to your name.

[Beast of Bourbon]

Reminds me of the Half-Life 2 Soucecode theft a couple of years back.
HL2 was delayed because of it and every gamer on earth was up in arms.

Hackers settle somewhere between Jack Thompson and Bobby Kotick in my book.

[johnodd4]

HA HA HA HA!!!!!

What kind of moron builds a hack and post's there real name in the hack moron's
big morons ha ha ha ha ha ha ha

all you have to do FBI is look for these morons.

ryan king

ian summers

ryan cleary

aaron lingard

there names are in the hack this is what we call extreme hacker noobs

[Mael Duin]

HA HA HA HA!!!!!

What kind of moron builds a hack and post's there real name in the hack moron's
big morons ha ha ha ha ha ha ha

all you have to do FBI is look for these morons.

ryan king

ian summers

ryan cleary

aaron lingard

there names are in the hack this is what we call extreme hacker noobs

I really doubt it was those guys. Most likely real hackers just try to frame them (in very bad way).

[RuStY98]

in the chat he's saying it could make it into the news so that just shows what they are really doing it for ATTENTION!!

[clean515]

in the chat he's saying it could make it into the news so that just shows what they are really doing it for ATTENTION!!

They are all doing it for different reasons. There is no organization, no decision makers or anything. Just some random people doing random stuff for random reasons and with random goals.

[Mo-green28]

people support/ supported these guys. wowww smh.

[Gameware336]

OH thats it. Everyone bring back every Eidos game you own, never to buy another one again.

[TekkenLord]

these losers will never stop, tsk tsk tsk.

[keefy]

Its very clever they are tryign to make out tht they are unorganised fools whilst fingering each other.

[Azu]

people support/ supported these guys. wowww smh.

1) you don't seem to understand that Anonymous is not a defined group of people. Anyone can be or at least can CLAIM to be a part of it, doesn't mean all of them are actually working for the good of the people or by the "rules" the rest of them follow.

2) this wasn't an official attack of Anonymous, but someone who's been involved with them doing stupid **** alone.

I still support Anonymous' cause of fighting big corporations etc. that don't care one bit of laws or etchical way of doing business, which the governments are doing nothing about. It sucks that some of them are some no-life nerds who have nothing else to do but cause trouble, but what they do outside of the "official" Anonymous dealings has absolutely nothing to do with Anonymous and the mostly good work they've been doing.

[Fenix]

Oh boy, whats next..

[ERC1980]

so not only are anonymous anti-gamer, they're anti-developer as well

people who support(ed) these crooks should hang their head in shame

[clean515]

so not only are anonymous anti-gamer, they're anti-developer as well

people who support(ed) these crooks should hang their head in shame

You don't understand anon at all, you should read :

1) you don't seem to understand that Anonymous is not a defined group of people. Anyone can be or at least can CLAIM to be a part of it, doesn't mean all of them are actually working for the good of the people or by the "rules" the rest of them follow.

2) this wasn't an official attack of Anonymous, but someone who's been involved with them doing stupid **** alone.

I still support Anonymous' cause of fighting big corporations etc. that don't care one bit of laws or etchical way of doing business, which the governments are doing nothing about. It sucks that some of them are some no-life nerds who have nothing else to do but cause trouble, but what they do outside of the "official" Anonymous dealings has absolutely nothing to do with Anonymous and the mostly good work they've been doing.

If you read and understood that post you can probably see how silly it is to say anon are anti developer and anti gamer, by that logic PSU forums are anti gamer too as some on here supported anon.

[Ghost-Rhayne]

You don't understand anon at all, you should read :

I dont think you understand anon at all, they are some of the worlds most racist, sexist, ruthless and merciless *******s whose origin can be traced to a site where pictures of child porn, death photos, racist slurs and all sorts of other filth were posted daily. They are a disorganised group of random *******s who have made it abundantly clear that they dont give 2 ****s about you or your consumer rights, or about the "evil corperations" and all they are really after is "fame", if you can call showing the world what a complete ****ing no life loser you are "fame". A new poster to these forums posted a very good post on them, I'll try and find it.

[Xelis]

Anonymous members may have been responsible for break-ins that compromised personal information on more than 100 million customers of its PlayStation Network and other services

Anyone else noticed that everytime it's reported this number keeps getting bigger?

[Ghost-Rhayne]

Anyone else noticed that everytime it's reported this number keeps getting bigger?

I think there was about 30 million or so accounts from SOE that were taken at the same time as the PSN hack which took around 77 million. Considering there has only been 50 mill PS3s sold, 20 million of those PSN are secondary accounts, most likely for other regions.

[clean515]

I dont think you understand anon at all, they are some of the worlds most racist, sexist, ruthless and merciless *******s whose origin can be traced to a site where pictures of child porn, death photos, racist slurs and all sorts of other filth were posted daily. They are a disorganised group of random *******s who have made it abundantly clear that they dont give 2 ****s about you or your consumer rights, or about the "evil corperations" and all they are really after is "fame", if you can call showing the world what a complete ****ing no life loser you are "fame". A new poster to these forums posted a very good post on them, I'll try and find it.

That's a lot of *****. But no, I completely understand and what happens and is posted on sites like 4chan and other places anon hangs out, no need to find some dumb article about it or try to lecture me.

That there is posted child porn on there certainly doesn't mean they all enjoy it either, there's a reason it is most of the time deleted very quickly. The few people who did do this probably did it for credit but it's far from everyones interest on there to gain e-fame. With a place like 4chan you take the good with the bad though, half of the stuff posted in the "epic funny thread" for example is photos made by /b/tards.

But all of this is beyond the point of my post which was that you can't say that they are anti gamers or anti developers, there is a whole board dedicated to gaming for example...