Latest News
MMO game Street Mobster leaking data of 1.9 million users due to critical vulnerability


Attackers could exploit the SQL Injection flaw to compromise the game’s database and steal user data.
The CyberNews.com Investigation team discovered a critical vulnerability in Street Mobster, a browser-based massively multiplayer online game created by Bulgarian development company BigMage Studios.
Street Mobster is a free to play, browser-based online game in the mafia empire genre where players manage a fictional criminal enterprise. The game boasts a 1.9+ million player base and stores a user record database that can be accessed by threat actors by committing an SQL Injection (SQLi) attack on the game’s website.
Other games created by BigMage Studios are also potentially vulnerable to the same type of attack, which means that there is a possibility that even more users might be at risk.
The records that can be compromised by exploiting the SQLi vulnerability in Street Mobster potentially include the players’ usernames, email addresses, and passwords, as well as other game-related data that is stored on the database.
Fortunately, after we reported the vulnerability to BigMage Studios, CERT Bulgaria, and the Bulgarian data protection authority, the issue has been fixed by the developers and the user database is no longer accessible to potential attackers.
What is SQL Injection?
First found back in 1998, SQLi is deemed by the Open Web Application Security Project (OWASP) as the number one web application security risk.
Even though this vulnerability is relatively easy to fix, researchers found that 8% of websites and web applications are still vulnerable to SQLi attacks in 2020. Which, from a security perspective, is inexcusable. So much so, in fact, that UK internet service provider TalkTalk was hit with a record £400,000 fine over succumbing to a cyberattack that involved SQLi.
The vulnerability works by injecting an unexpected payload (a piece of code) into the input box on the website or in its URL address. Instead of reading the text as part of the URL, the website’s server reads the attacker’s payload as code and then proceeds to execute the attacker’s command or output data that would otherwise be inaccessible to unauthorized parties. Attackers can exploit SQLi even further by uploading pieces of code or even malware to the vulnerable server.
The fact that Street Mobster is susceptible to SQLi attacks clearly shows the disappointing and dangerous neglect of basic security practices on the part of the developers at BigMage Studios.
How we found this vulnerability
Our security team identified an SQL Injection vulnerability on the Street Mobster website and were able to confirm the vulnerability by performing a simple command injection test on the website URL. The CyberNews team did not extract any data from the vulnerable Street Mobster database.
What’s the impact of the vulnerability?
The data in the vulnerable Street Mobster database can be used in a variety of ways against the players whose information was exposed:
By injecting malicious payloads on Street Mobster’s server, attackers can potentially gain access to said server, where they can install malware on the game’s website and cause harm to the visitors – from using the players’ devices to mine cryptocurrency to redirecting them to other malicious websites, installing malware, and more.
The 1.9 million user credentials stored on the database can net the attackers user email addresses and passwords, which they can potentially use for credential stuffing attacks to hack the players’ accounts on other gaming platforms like Steam or other online services.
Because Street Mobster is a free-to-play game that incorporates microtransactions, bad actors could also make a lot of money from selling hacked player accounts on gray market websites.
What to do if you’ve been affected?
If you have a Street Mobster account, make sure to change your password immediately and make it as complex as possible. If you’ve been using your Street Mobster password on any other websites or services, change that password as well. This will prevent potential attackers from accessing your accounts on these websites in case they try to reuse your password for credential stuffing attacks.
However, it’s ultimately up to BigMage Studios to completely secure your Street Mobster account against attacks like SQLi.
Disclosure and lack of communication from BigMage Studios
Following our vulnerability disclosure guidelines, we notified the BigMage Studios about the leak on August 31, 2020. However, we received no reply. Our follow-up emails were left unanswered as well.
We then reached out to CERT Bulgaria on September 11 in order to help secure the website. CERT contacted the BigMage Studios and informed the company about the misconfiguration.
Throughout the disclosure process, BigMage Studios stayed radio silent and refused to get in touch with CyberNews.com. Due to this reason, we also notified the Bulgarian data protection agency about the incident on October 9 in the hopes that the agency would be able to pressure the company into fixing the issue.
Eventually, however, BigMage Studios appear to have fixed the SLQi vulnerability on streetmobster.com, without informing either CyberNews.com or CERT Bulgaria about that fact.
Source: Latest News on European Gaming Media Network
This is a Syndicated News piece. Photo credits or photo sources can be found on the source article: MMO game Street Mobster leaking data of 1.9 million users due to critical vulnerability

Latest News
Week 27/2025 slot games releases
Here are this weeks latest slots releases compiled by European Gaming
PG Soft has served up a classic slot with its Diner Frenzy Spins. This is a 5-reel, 4-rows video slot featuring connecting ways and sticky symbol respins. Diner Frenzy Spins is set within a vibrant, retro-futuristic diner with a buzzy atmosphere thanks to a playful soundtrack. During any spin, the Mystery Respin may be randomly triggered while the reels are spinning.
ELA Games calls back to a classic yet luxurious gaming experience with its new title, Juicy Crystal. The game offers a unique and modern twist on the beloved and familiar fruit machine format, featuring timeless symbols and rich visuals. The studio’s trademark attention to detail and quality delivers a game that’s exciting, memorable and elegant.
Amusnet presents its newest Online Casino portfolio expansion – a royal-themed slot filled with exciting bonus features. The release adds to the fun of the player-favourite Extra Crown game series, this time with six reels and 100 paylines, top-notch graphics and a vibrant soundtrack. A total of 11 symbols are scattered across the now six reels and 40 fixed paylines, along with some special features that make the gameplay more engaging and fun.
Play’n GO illuminate their classic Moon Princess universe once more with Moon Princess Stargazing, a grid slot set among icy stars and rising multipliers. Set beyond Neptune in the icy reaches of the Kuiper Belt, Moon Princess Stargazing marks a radiant new chapter in one of Play’n GO’s most celebrated series. Players reunite with Star, Nova and Astra – the celestial trio whose powers help forge constellation connections and unlock sky-high wins.
Step into the golden sands of Ancient Egypt with Ra’s Relics Bonanza, a thrilling 6×5 cascading slot adventure from Booming Games! Land 8 or more matching symbols anywhere on the reels to secure a win, as winning symbols vanish and new ones tumble down, unlocking endless chances for treasure. Keep an eye on the Divine Scarab, collecting scatter symbols throughout the base game and triggering Free Spins at any moment.
The post Week 27/2025 slot games releases appeared first on European Gaming Industry News.
Latest News
NODWIN Gaming partners with Esports World Cup Foundation to manage media rights sales across South Asia
NODWIN Gaming, a leader in South Asia’s esports and gaming ecosystem has officially partnered with the Esports World Cup Foundation (EWCF) to manage media rights sales across South Asia including India, Bangladesh, Nepal, and other surrounding territories.
NODWIN Gaming will act as the strategic support for the EWCF in the region, supporting with media rights sales and distribution strategies for the EWC across South Asia. The partnership aims to bring the Esports World Cup to a broader audience of fans in one of the fastest-growing esports markets globally. Additionally, NODWIN Gaming will act as the EWCF’s marketing partner for the Indian market, to conceptualize and execute local campaigns and initiatives that support the Foundation’s mission of elevating esports and gaming culture worldwide.
The EWCF is the nonprofit organization behind the Esports World Cup (EWC), the world’s largest multi-title esports competition. The 2024 inaugural edition featured 1,500 elite players and 200 clubs from over 100 countries, competing across 21 titles for a record-breaking $60 million prize pool. With 500 million online viewers and 2.6 million in-person attendees, the EWC set a new benchmark for esports competitions worldwide.
With a proven legacy in managing media rights for the targeted distribution of world-class esports and entertainment content, NODWIN Gaming has successfully brought competitive gaming to mainstream audiences through multiple broadcast platforms, including television and OTT services. Its marquee IP, the Battlegrounds Mobile India Masters Series (BGMS), is currently the only Indian esports tournament to air on national television, broadcasting on Star Sports for three consecutive years. The company has also delivered top-tier productions and media rights solutions for properties such as the eISL in collaboration with Football Sports Development Limited (FSDL), the VALORANT Challengers South Asia with Riot Games, the Mountain Dew Arena with ESL India, and the Kingfisher India Premiership, among others.
Akshat Rathee, Co-Founder and Managing Director of NODWIN Gaming said, “The Esports World Cup is a landmark moment for global esports, and we’re proud to partner with the EWCF to bring that experience to South Asia. This partnership is about more than just broadcasting a tournament – it’s about building a bridge between South Asia’s incredibly passionate gaming communities and the global stage that the EWCF represents. Whether it’s in India, Bangladesh,
Nepal or beyond, our goal is to make world-class esports content more accessible than ever. We’re excited to work closely with the EWCF to not only grow the tournament’s reach but to also support the larger ecosystem and community it helps foster.”
The EWCF is dedicated to supporting the long-term growth and financial sustainability of the global esports and gaming sectors. The foundation’s mission is to advocate for the entire ecosystem including players, fans, and businesses and to reinvest any proceeds back into initiatives that fuel the development of the industry.
“Our mission at the Esports World Cup Foundation is to create lasting impact for the global esports industry by setting new competitive benchmarks and forging partnerships that understand the nuances of each region. South Asia represents an incredibly dynamic and fast-growing gaming market, and NODWIN Gaming brings unparalleled knowledge, reach, and local trust to this ecosystem. By partnering with NODWIN, we are not only ensuring that the Esports World Cup reaches more fans, but we are also reinforcing our commitment to making esports more accessible, inclusive, and sustainable.” stated Mike McCabe, COO of the Esports World Cup Foundation.
Through this association, the EWCF strengthens its global presence while leveraging NODWIN Gaming’s deep-rooted experience in youth engagement, esports content, and regional distribution across emerging economies.
The post NODWIN Gaming partners with Esports World Cup Foundation to manage media rights sales across South Asia appeared first on European Gaming Industry News.
Latest News
Current Games Activates the Nitro on Neon-Soaked Arcade Combat Racer: Cyber Clutch: Hot Import Nights
Current Games, a new name in indie publishing, based in the Netherlands, announced that it has assumed publishing rights for Cyber Clutch: Hot Import Nights, a heart-stopping, breakneck combat racing game, soaked in a neon lit future where speed and survival are the only routes to success!
A thrilling arcade style experience, Cyber Clutch: Hot Import Nights was first launched in Early Access on Steam in 2024, building a loyal community of dedicated fans passionate in seeing the game succeed. Current Games have heard the call and have spent a considerable amount of time diligently working under the hood, implementing a host of game-changing upgrades, delivering a fully revamped, nitro-powered experience, worthy of the Hot Import Nights (HIN) brand.
With the major update due to go live on July 24th 2025, speed demons are in for the ride of their lives as Cyber Clutch: Hot Import Nights power-ups on Steam, as well as launching on PlayStation®5, Xbox Series X|S and Epic Games® Store!
Make no mistake, this is no mere tweak, from July 24th, a whole host of surprises await fans of the game and newcomers alike. Some of the changes include:
- An all-new sprawling racing track to discover and master
- More cars mean more fun! Discover your favourite vehicles and race like your life depends on it!
- Major balancing changes based on extensive community feedback
- A new single player career mode with championship races
- Overall improvements to the game’s experience and stability
In taking over publishing for Cyber Clutch: Hot Import Nights Current Games is keen to emphasise their commitment to engaging with and supporting the community. Planned initiatives arriving soon include the reactivation of the games’ Reddit account, a new Discord server and a planned playtest scheduled for pre-launch.
In Cyber Clutch: Hot Import Nights, street legends are built after dark, as gamers brave enough to face the neon-soaked streets of the future, race, fight, and ultimately conquer with up to eight players competing head-to-head in a fight to survive and pass the winning line alive.
Each chariot in Cyber Clutch: Hot Import Nights is equipped with an arsenal of outlandish offensive and defensive weapons, enabling players to outmanoeuvre and outgun their opponents as they speed towards victory. Choose from a diverse range of customizable vehicles across three weight classes, each with distinct advantages. Lightweight vehicles boast speed but sacrifice defence, while heavyweight vehicles offer greater protection at the cost of agility. Weapons can be charged through pickups or by executing perfect drifts, adding a strategic layer to the high-speed action.
Accessible yet challenging, easy to play, impossible to put down, ruthlessly hard to master and never anything less than exhilarating, Cyber Clutch: Hot Import Nights is racing like you’ve never experienced before!
Roderick Roode, CEO of Current Games commented on the major upgrade and console release of Cyber Clutch: Hot Import Nights, “We are honoured to assume publishing rights for Cyber Clutch and determined to give this high-impact combat racing experience the love, attention and polish it deserves. Cyber Clutch has attracted a loyal audience in the year since launch, but we know the game is destined for even bigger things, and we’re thrilled to finally deliver a fully levelled-up experience, which we’re convinced will delight combat racing fans. In addition, we’re excited to bring the full Cyber Clutch experience to more gamers than ever, releasing on PlayStation, Xbox and the Epic Game Store, and cannot wait to see players assume their position on the starting grid later this month.”
The post Current Games Activates the Nitro on Neon-Soaked Arcade Combat Racer: Cyber Clutch: Hot Import Nights appeared first on European Gaming Industry News.
-
Latest News3 months ago
Exclusive Q&A With Bar Konson, Chief Business Development Officer at NuxGame
-
Latest News2 months ago
Week 17/2025 slot games releases
-
Latest News2 months ago
Fortuna Partners with 2025 UEFA Under-21 EURO
-
Latest News3 months ago
Esports World Cup Foundation Confirms Full Game Lineup, Schedule, and Club Championship Rules for EWC 2025
-
Latest News2 months ago
ELA Games Receives Key Nomination at EGR Marketing & Innovation Awards
-
Latest News3 months ago
ACR POKER’S NEXT HIGH STAKES ADVENTURE TAKES PLAYERS TO MONTENEGRO FOR PRESTIGIOUS SUPER HIGH ROLLER SERIES
-
Latest News2 months ago
Bojoko.com Surpasses €100 Million in All-Time Deposits Milestone
-
Latest News2 months ago
LeoVegas Group to Open a New Office in Leeds
You must be logged in to post a comment Login