Connect with us

Powered

728x90 banner available here

Latest News

MMO game Street Mobster leaking data of 1.9 million users due to critical vulnerability

Published

on

MMO game Street Mobster leaking data of 1.9 million users due to critical vulnerability
MMO game Street Mobster leaking data of 1.9 million users due to critical vulnerabilityReading Time: 3 minutes

Attackers could exploit the SQL Injection flaw to compromise the game’s database and steal user data.

The CyberNews.com Investigation team discovered a critical vulnerability in Street Mobster, a browser-based massively multiplayer online game created by Bulgarian development company BigMage Studios.

Street Mobster is a free to play, browser-based online game in the mafia empire genre where players manage a fictional criminal enterprise. The game boasts a 1.9+ million player base and stores a user record database that can be accessed by threat actors by committing an SQL Injection (SQLi) attack on the game’s website.

Other games created by BigMage Studios are also potentially vulnerable to the same type of attack, which means that there is a possibility that even more users might be at risk.

The records that can be compromised by exploiting the SQLi vulnerability in Street Mobster potentially include the players’ usernames, email addresses, and passwords, as well as other game-related data that is stored on the database.

Fortunately, after we reported the vulnerability to BigMage Studios, CERT Bulgaria, and the Bulgarian data protection authority, the issue has been fixed by the developers and the user database is no longer accessible to potential attackers.

What is SQL Injection?

First found back in 1998, SQLi is deemed by the Open Web Application Security Project (OWASP) as the number one web application security risk.

Even though this vulnerability is relatively easy to fix, researchers found that 8% of websites and web applications are still vulnerable to SQLi attacks in 2020. Which, from a security perspective, is inexcusable. So much so, in fact, that UK internet service provider TalkTalk was hit with a record £400,000 fine over succumbing to a cyberattack that involved SQLi.

The vulnerability works by injecting an unexpected payload (a piece of code) into the input box on the website or in its URL address. Instead of reading the text as part of the URL, the website’s server reads the attacker’s payload as code and then proceeds to execute the attacker’s command or output data that would otherwise be inaccessible to unauthorized parties. Attackers can exploit SQLi even further by uploading pieces of code or even malware to the vulnerable server.

The fact that Street Mobster is susceptible to SQLi attacks clearly shows the disappointing and dangerous neglect of basic security practices on the part of the developers at BigMage Studios.

 

How we found this vulnerability

Our security team identified an SQL Injection vulnerability on the Street Mobster website and were able to confirm the vulnerability by performing a simple command injection test on the website URL. The CyberNews team did not extract any data from the vulnerable Street Mobster database.

What’s the impact of the vulnerability?

The data in the vulnerable Street Mobster database can be used in a variety of ways against the players whose information was exposed:

By injecting malicious payloads on Street Mobster’s server, attackers can potentially gain access to said server, where they can install malware on the game’s website and cause harm to the visitors – from using the players’ devices to mine cryptocurrency to redirecting them to other malicious websites, installing malware, and more.

The 1.9 million user credentials stored on the database can net the attackers user email addresses and passwords, which they can potentially use for credential stuffing attacks to hack the players’ accounts on other gaming platforms like Steam or other online services.

Because Street Mobster is a free-to-play game that incorporates microtransactions, bad actors could also make a lot of money from selling hacked player accounts on gray market websites.

What to do if you’ve been affected?

If you have a Street Mobster account, make sure to change your password immediately and make it as complex as possible. If you’ve been using your Street Mobster password on any other websites or services, change that password as well. This will prevent potential attackers from accessing your accounts on these websites in case they try to reuse your password for credential stuffing attacks.

However, it’s ultimately up to BigMage Studios to completely secure your Street Mobster account against attacks like SQLi.

Disclosure and lack of communication from BigMage Studios

Following our vulnerability disclosure guidelines, we notified the BigMage Studios about the leak on August 31, 2020. However, we received no reply. Our follow-up emails were left unanswered as well.

We then reached out to CERT Bulgaria on September 11 in order to help secure the website. CERT contacted the BigMage Studios and informed the company about the misconfiguration.

Throughout the disclosure process, BigMage Studios stayed radio silent and refused to get in touch with CyberNews.com. Due to this reason, we also notified the Bulgarian data protection agency about the incident on October 9 in the hopes that the agency would be able to pressure the company into fixing the issue.

Eventually, however, BigMage Studios appear to have fixed the SLQi vulnerability on streetmobster.com, without informing either CyberNews.com or CERT Bulgaria about that fact.

 

Source


Source: Latest News on European Gaming Media Network
This is a Syndicated News piece. Photo credits or photo sources can be found on the source article: MMO game Street Mobster leaking data of 1.9 million users due to critical vulnerability

George Miller (Gyorgy Molnar) started his career in content marketing and has started working as an Editor/Content Manager for our company in 2016. George has acquired many experiences when it comes to interviews and newsworthy content becoming Head of Content in 2017. He is responsible for the news being shared on multiple websites that are part of the European Gaming Media Network.

Latest News

EveryMatrix signals LatAm expansion plans with CIBELAE membership

Published

on

Reading Time: 1 minute

EveryMatrix has joined CIBELAE, the official branch of the World Lottery Association for 80 Hispanic American speaking countries, including Latin and Central America, Spain and Portugal, signalling its plans to expand its global reach across multiple regulated markets.

The application to join the Corporación Iberoamericana de Loterías y Apuestas de Estado as an Associate Member was approved at CIBELAE board level and is due to be formally ratified during the organisation’s Annual Ordinary Assembly later this year.

Membership positions the tier-1 technology provider alongside the most reputable lottery and iGaming institutions in 80 countries across six continents including Latin America, gaining valuable networking opportunities across events, working groups and industry discussions with major local operators.

It will also provide EveryMatrix with increased regional influence enabling its local and international commercial and product experts to contribute to shaping conversations around regulation, technology, and innovation within the lottery, betting and iGaming sectors.

EveryMatrix has a long history of working closely with tier-1 customers in LatAm and Spanish and Portuguese speaking markets with products including its SlotMatrix aggregation and exclusive content licensed and/or certified in Brazil, Columbia, Peru, Portugal, Spain, and many more territories.

Ebbe Groes, Group CEO & Co-Founder EveryMatrix, said: “This is a great step forward in both solidifying and expanding our presence in Latin America, Spain, Portugal and many other key territories as a trusted technology partner for lotteries.

“We look forward to leveraging this membership to create new, long-lasting relationships and opportunities and contributing to the growth and sustainable success of many important regulated markets.”

Rodrigo Cigliutti, Executive Director, CIBELAE, said: “The incorporation of EveryMatrix as an Associate Member of CIBELAE brings to our network a world-class B2B technology partner, renowned for delivering scalable, compliant, and innovative solutions that empower national and state-owned lotteries to modernise, expand omnichannel operations, and enhance player protection in regulated markets worldwide.”

The post EveryMatrix signals LatAm expansion plans with CIBELAE membership appeared first on European Gaming Industry News.

Continue Reading

Latest News

SBC Summit 2025: New Conference Track Explores Asia’s Gaming Market

Published

on

Reading Time: 2 minutes

SBC Summit 2025 will provide delegates with a comprehensive overview of the latest developments shaping Asian sports betting and iGaming, delivered through its new Emerging Markets conference track.

On Thursday, 18 September 2025, at the Feira Internacional de Lisboa (FIL), the stage will bring together Asia’s leading industry figures to examine a market valued at over $18.3 billion last year. Sessions will cover how operators can navigate compliance across the continent’s diverse jurisdictions, whether India is moving towards a regulated market, and if the wider Asia-Pacific region represents the next major opportunity for international businesses.

The Asia-focused track will mark the culmination of three days of conference action on the Emerging Markets Stage. Day one will explore opportunities in Africa, and day two will analyse the markets of Eurasia and the Middle East.

Rasmus Sojmark, CEO and founder of SBC, said: “If you’re building a global gaming business, you can’t afford to ignore Asia. This track makes it clear why the region belongs at the center of every long-term growth strategy.

“Asia needs a platform where regulators, operators, suppliers, and investors can talk openly. SBC is proud to provide that space, and the Emerging Markets stage is the centerpiece of that effort.”

Opening the discussion is the panel Asia: Navigating Regulation, Opportunity and Uncertainty, which will take an in-depth look at the regulatory landscape across the entire region. Here, industry experts Rory Anderson (Consultant, 12BET), Paul Fox (Chairman & Founder, Claymore Solutions), Lau Kok Keng (Head of Intellectual Property, Sports & Gaming, Rajah & Tan Singapore), Yuta Romanchenko (CBDO, Big Idea), and panel moderator Rosalind Wade (CEO, WinnaMedia) will explore contrasting jurisdictions, from the rise of alternative betting in India to Macau’s entrenched land-based sector, while also assessing which countries are most primed for investment and market entry.

India’s Regulatory Roadmap: The Next Decade for Gaming will shine a spotlight on the country’s complex state-by-state framework and the legal divide between games of skill and games of chance, which has created a unique environment: fantasy sports, lottery, and horse racing have flourished, while online gaming and traditional sports betting remain largely restricted. Bringing together Ranjana Adhikari (Partner, Shardul Amarchand Mangaldas & Co Advocates & Solicitors), Anton Kaszubowski (Managing Director, SBC Advisory), and Japneet Singh Sethi (Chief Growth Officer – South Asia, iGaming NDA), the panel will explore whether the industry is moving toward meaningful regulation or if the grey market will continue to dominate.

The panel Philippines: Life after POGOs will bring together Dominique Laconico (President & CEO, MegaBet+ & Scorebet), Keith McDonnell (Director, KMI Group), Joe Pisano (CEO, Jade Gaming), and Marie Antonette “Tonet” Quiogue (Principal, Arden Consult) to examine the country’s shift from offshore gaming operators (POGOs) to the newly introduced PIGOs. The discussion will explore whether this transition makes the Philippines Asia’s first truly regulated market, the continuing role of PAGCOR, the fate of overseas populations once served by POGOs and the lessons other Asian jurisdictions can draw from this model.

The SBC Summit 2025 agenda also includes the Global Markets stage, which will provide a focused look at the world’s most profitable sports betting and iGaming markets. Over the course of three days, delegates will gain insights into strategies for market entry and expansion in Latin America & Brazil, Western Europe and North America.

Get your tickets for SBC Summit 2025 today!

The post SBC Summit 2025: New Conference Track Explores Asia’s Gaming Market appeared first on European Gaming Industry News.

Continue Reading

Latest News

AD STANDARDS COUNCIL HONORS PAGCOR CHIEF

Published

on

Reading Time: < 1 minute

The Ad Standards Council (ASC) today recognized Philippine Amusement and Gaming Corporation (PAGCOR) Chairman and CEO Alejandro H. Tengco for his leadership in promoting responsible advertising in the gaming industry during the council’s Patas na Patalastas Summit in Makati City.

In accepting the Plaque of Appreciation from the ASC, Mr. Tengco said the honor was not only for him but also for the men and women of PAGCOR who remain committed to fairness, truth, and accountability in discharging their responsibilities.

He also commended the ASC for its role in upholding truth, decency, and accountability in Philippine advertising.

“Industries like ours carry an even greater responsibility to protect public trust,” Mr. Tengco said. “Our partnership with ASC ensures that gambling-related advertisements are not only creative and compelling but also ethical, truthful, and mindful of their impact on society.”

The ASC and PAGCOR formalized their collaboration last July 16 through a Memorandum of Understanding requiring all gambling-related ads – whether on TV, radio, online, or outdoors – to undergo ASC review and approval before public release.

PAGCOR itself also ordered the removal of all outdoor gambling billboards as part of its stricter regulatory measures last month.

“These steps are proof that when it comes to protecting the public, we will always choose to do what is right,” the PAGCOR chief added.

The ASC summit brought together regulators, advertisers, and industry stakeholders to reinforce collaborative efforts in ensuring truthful, ethical, and accountable advertising practices in the Philippines.

The post AD STANDARDS COUNCIL HONORS PAGCOR CHIEF appeared first on European Gaming Industry News.

Continue Reading

Trending

EEGaming.org is part of HIPTHER, parent brand of various prominent news outlets and international conferences. These platforms and events span a wide range of industries, including Entertainment, Technology, Gaming and Gambling, Blockchain, Artificial Intelligence, Fintech, Quantum Technology, Legal Cannabis, Health and Lifestyle, VR/AR, eSports, and several others. This indicates that EEGaming.org is part of a larger network that focuses on a diverse array of sectors, particularly those related to cutting-edge technology and modern lifestyle trends.

Contact us: [email protected]

Editorial / PR Submissions: [email protected]

Copyright © 2015 - 2025 HIPTHER. All Rights Reserved. Registered in Romania under Proshirt SRL, Company number: 2134306, EU VAT ID: RO21343605. Office address: Blvd. 1 Decembrie 1918 nr.5, Targu Mures, Romania

We are constantly showing banners about important news regarding events and product launches. Please turn AdBlock off in order to see these areas.