Latest News
MMO game Street Mobster leaking data of 1.9 million users due to critical vulnerability

Reading Time: 3 minutes
Attackers could exploit the SQL Injection flaw to compromise the game’s database and steal user data.
The CyberNews.com Investigation team discovered a critical vulnerability in Street Mobster, a browser-based massively multiplayer online game created by Bulgarian development company BigMage Studios.
Street Mobster is a free to play, browser-based online game in the mafia empire genre where players manage a fictional criminal enterprise. The game boasts a 1.9+ million player base and stores a user record database that can be accessed by threat actors by committing an SQL Injection (SQLi) attack on the game’s website.
Other games created by BigMage Studios are also potentially vulnerable to the same type of attack, which means that there is a possibility that even more users might be at risk.
The records that can be compromised by exploiting the SQLi vulnerability in Street Mobster potentially include the players’ usernames, email addresses, and passwords, as well as other game-related data that is stored on the database.
Fortunately, after we reported the vulnerability to BigMage Studios, CERT Bulgaria, and the Bulgarian data protection authority, the issue has been fixed by the developers and the user database is no longer accessible to potential attackers.
What is SQL Injection?
First found back in 1998, SQLi is deemed by the Open Web Application Security Project (OWASP) as the number one web application security risk.
Even though this vulnerability is relatively easy to fix, researchers found that 8% of websites and web applications are still vulnerable to SQLi attacks in 2020. Which, from a security perspective, is inexcusable. So much so, in fact, that UK internet service provider TalkTalk was hit with a record £400,000 fine over succumbing to a cyberattack that involved SQLi.
The vulnerability works by injecting an unexpected payload (a piece of code) into the input box on the website or in its URL address. Instead of reading the text as part of the URL, the website’s server reads the attacker’s payload as code and then proceeds to execute the attacker’s command or output data that would otherwise be inaccessible to unauthorized parties. Attackers can exploit SQLi even further by uploading pieces of code or even malware to the vulnerable server.
The fact that Street Mobster is susceptible to SQLi attacks clearly shows the disappointing and dangerous neglect of basic security practices on the part of the developers at BigMage Studios.
How we found this vulnerability
Our security team identified an SQL Injection vulnerability on the Street Mobster website and were able to confirm the vulnerability by performing a simple command injection test on the website URL. The CyberNews team did not extract any data from the vulnerable Street Mobster database.
What’s the impact of the vulnerability?
The data in the vulnerable Street Mobster database can be used in a variety of ways against the players whose information was exposed:
By injecting malicious payloads on Street Mobster’s server, attackers can potentially gain access to said server, where they can install malware on the game’s website and cause harm to the visitors – from using the players’ devices to mine cryptocurrency to redirecting them to other malicious websites, installing malware, and more.
The 1.9 million user credentials stored on the database can net the attackers user email addresses and passwords, which they can potentially use for credential stuffing attacks to hack the players’ accounts on other gaming platforms like Steam or other online services.
Because Street Mobster is a free-to-play game that incorporates microtransactions, bad actors could also make a lot of money from selling hacked player accounts on gray market websites.
What to do if you’ve been affected?
If you have a Street Mobster account, make sure to change your password immediately and make it as complex as possible. If you’ve been using your Street Mobster password on any other websites or services, change that password as well. This will prevent potential attackers from accessing your accounts on these websites in case they try to reuse your password for credential stuffing attacks.
However, it’s ultimately up to BigMage Studios to completely secure your Street Mobster account against attacks like SQLi.
Disclosure and lack of communication from BigMage Studios
Following our vulnerability disclosure guidelines, we notified the BigMage Studios about the leak on August 31, 2020. However, we received no reply. Our follow-up emails were left unanswered as well.
We then reached out to CERT Bulgaria on September 11 in order to help secure the website. CERT contacted the BigMage Studios and informed the company about the misconfiguration.
Throughout the disclosure process, BigMage Studios stayed radio silent and refused to get in touch with CyberNews.com. Due to this reason, we also notified the Bulgarian data protection agency about the incident on October 9 in the hopes that the agency would be able to pressure the company into fixing the issue.
Eventually, however, BigMage Studios appear to have fixed the SLQi vulnerability on streetmobster.com, without informing either CyberNews.com or CERT Bulgaria about that fact.
Source: Latest News on European Gaming Media Network
This is a Syndicated News piece. Photo credits or photo sources can be found on the source article: MMO game Street Mobster leaking data of 1.9 million users due to critical vulnerability
Latest News
S8UL Makes History at the Esports Awards 2025, Becomes First Indian Organisation to Win Two Major Honours
Reading Time: 3 minutes
S8UL wins Esports Content Group of the Year for the fourth time, Animesh “8Bit Thug” Agarwal crowned Esports Personality of the Year at the Oscars of gaming
S8UL Esports, India’s trailblazing force in gaming and creator-led entertainment, delivered a landmark moment at the Esports Awards 2025 in Las Vegas. The organisation celebrated a remarkable double win, lifting the Esports Content Group of the Year award for the fourth time, while Co-Founder Animesh “8Bit Thug” Agarwal was honoured as Esports Personality of the Year. The night became even more memorable as S8UL emerged as the first and only Indian organisation to win two separate titles at the Esports Awards, a milestone shaped by the team’s heart, dedication, and years of passion.
Often called the Oscars of the gaming world, the Esports Awards shine a spotlight on the finest global talent every year. For India, S8UL’s double win comes during a remarkable season in which the organisation also competed at the Esports World Cup, standing alongside some of the world’s most premier teams and creators while representing the country on one of esports’ biggest international stages. Winning Content Group of the Year again, in a category stacked with giants like T1, Sentinels, Team Liquid, and Fnatic, reinforces S8UL’s global standing and the strength of its storytelling, creativity, and community-first approach.
This year also marked a proud moment for Indian creators who featured among some of the world’s most competitive categories. Payal Dhare, widely known as Payal Gaming, was nominated for Streamer of the Year. She stood alongside some of the biggest names in global streaming including Kai Cenat, Marc “Caedrel” Lamont, Morgan “AngryGinge” Burtwistle, Felix “xQc” Lengyel, Nicholas “Jynxzi” Stewart, and Nick “Lacy” Fosco. The award was ultimately won by Darren “IShowSpeed” Watkins Jr, yet Payal’s presence in a lineup of this scale reflects the growing global footprint of Indian creators and the doors they continue to open. Snax also continued to represent India’s creator and competitive community across the year, contributing to S8UL’s global presence including its run at the Esports World Cup, where the organisation competed in some of the most challenging lineups internationally.
Raj Varma carried the Indian flag into the Esports Content Creator of the Year category, nominated alongside Marc “Caedrel” Lamont, Cody “Clix” Conrod, Alexandre “gAuLeS” Borba, Tarik “Tarik” Celik, Jack “NiceWigg” Martin, and Mark “Ohnepixel” Zimmermann. The award went to Nicholas “Jynxzi” Stewart, yet Raj’s nomination underscored the rise of Indian storytellers who are now being recognised at the highest level of global esports entertainment.
Reflecting on the landmark night, S8UL’s founders shared their thoughts.
Animesh “8Bit Thug” Agarwal, Co-Founder, S8UL, said, “This year’s esports awards nominations were already huge for us. Back to back nominations told us we were doing something right. But winning Content Group of the year, for the fourth time running, its just wild. Lets take a moment to celebrate the huge moment that it is! And ‘Esports Personality of the year’, that really is a shared victory! The nights our fans have spent watching us, cheering us and all the votes they cast, together we’ve made this happen. Honestly, if you are a wellwisher of Indian Gaming, its the time to rejoice. Seeing Indian Gaming here, its big. I always knew this can happen, but its surreal when it did. Going back home with so much more determination! “
Naman ‘Mortal’ Mathur, Co-Founder, S8UL, said, “This is a proud moment not just for S8UL, but for India. Year after year, our goal has been to show the world that Indian gaming creators can stand shoulder to shoulder with the best. These wins inspire us to push even harder and continue representing India globally.”
Lokesh “Goldy” Jain, Co-Founder, S8UL, said, “S8UL has always been about building a legacy rooted in creativity, collaboration, and community. Winning two awards tonight is a testament to the relentless efforts of our team and the unwavering love of our fans. We will continue raising the bar for Indian esports and creators worldwide.”
As S8UL celebrates a historic night, the moment stands as another reminder of how far Indian esports has come and where it is headed. With creators, teams, and leadership continuously raising industry benchmarks, S8UL’s journey continues to inspire millions across the country, proving yet again that world-class esports culture can grow from the heart of India’s gaming community.
The post S8UL Makes History at the Esports Awards 2025, Becomes First Indian Organisation to Win Two Major Honours appeared first on European Gaming Industry News.
Latest News
Red Bull Solo Legends National Final Set to Make Esports History at the Royal Opera House, Mumbai
Reading Time: 2 minutes
Red Bull Solo Legends is stepping into a new chapter as the tournament’s national finals arrive at the breathtaking Royal Opera House, Mumbai on 2nd December.
For the first time ever, the century-old cultural landmark will host an esports event, bringing competitive gaming into a space that has witnessed some of India’s most celebrated artistic performances.
This is a powerful moment for Indian esports. What began in community rooms, cyber cafés, and online lobbies now enters one of the country’s most majestic stages, celebrating the growth of gaming as a modern cultural force.
The journey to the finals has been equally ambitious. Red Bull Solo Legends is a multi-phase tournament, featuring both online and on-ground stages, uniting tens of thousands of solo BGMI players from every corner of the country. From grassroots talent to seasoned pros, competitors battled through a pure solo queue format, proving their instincts, consistency, and clutch ability. Each round brought them closer to the opportunity of facing India’s top BGMI professionals at the finals. The champion of Red Bull Solo Legends will walk away with the title of India’s strongest solo BGMI player along with an exclusive international Red Bull Racing experience.
With 64 of the country’s finest solo BGMI contenders taking the stage, 32 qualified finalists, 24 top-tier pros, and 8 Chaos Agents, the Royal Opera House will echo with a new kind of intensity.They will compete across 5 matches to determine the first-ever Red Bull Solo Legends champion. As spectators walk in, they’ll be part of a one-of-a-kind atmosphere where strategy, instinct, and pure solo skill unfold inside one of Mumbai’s most exquisite architectural treasures.
Red Bull Solo Legends will feature some of India’s prominent BGMI athletes including Jonathan Amaral (Jonathan Gaming), Tanishk Singh (Admino), Rudra B (Spower), Sahil Jakhar (Omega), Raghuraj Singh (Slug), Mohammed Owais Lakhani (Owais), Sohail Shaikh (Hector), and Paridhi Gupta (Noob Pari) and many more. These players, known for their exceptional skills, will compete against each other, bringing their unique strategies and gameplay styles to the forefront. Esports thrives on pressure, audience energy, and unforgettable moments. The Royal Opera House, known for its grandeur and legacy, offers a stage worthy of the stakes. The contrast is striking in the best way, with ornate balconies and vintage chandeliers watching over India’s sharpest digital athletes as they fight for the title of the country’s strongest solo BGMI player.
Built between 1909 and 1915 and inaugurated by King George V, the Royal Opera House is India’s only surviving opera house, restored lovingly after decades of closure. From theatre to classical music to film screenings, its stage has embraced every form of performance. On 2nd December, it will embrace competitive gaming for the very first time, welcoming India’s esports community into its history.
Red Bull Solo Legends has been created to celebrate individual excellence in BGMI. Every rotation, every fight, every decision rests on the player alone. Hosting the finals in a venue that represents mastery, legacy, and performance adds a rare emotional depth to the competition, turning every clutch into a moment that will be remembered long after the final circle closes.
Tickets will be exclusively live on Swiggy Scenes 21st November onward.
Matches will also be broadcast live on the Red Bull Game On YouTube channel for fans from across the country: youtube.com/@RedBullGameOn
The post Red Bull Solo Legends National Final Set to Make Esports History at the Royal Opera House, Mumbai appeared first on European Gaming Industry News.
Latest News
eGaming Integrity Shortlisted for Tech Supporter of the Year Award
Reading Time: < 1 minute
eGaming Integrity has been shortlisted for the Tech Supporter of the Year award at the Digital Isle Tech Awards 2025, which recognise organisations making a significant contribution to the Island’s technology sector through collaboration, capability-building, and practical support.
eGaming Integrity provides compliance and internal audit services that help digital businesses strengthen their regulatory readiness and operational resilience. Its integrity-as-a-service model combines monitoring tools, risk assessments, and regulatory guidance to support both new and established operators. The firm also contributes to broader industry development by delivering workshops, best-practice resources, and advisory support aimed at helping early-stage and growing companies navigate compliance and security requirements.
Companies working with eGaming Integrity report improvements in governance, data protection, and audit preparedness, along with increased confidence when launching products or expanding into new markets. The firm’s partnerships with accelerators, incubators, and industry bodies have helped foster a more open and collaborative environment across the Island’s tech community.
Emma Shilling, Director of eGaming Integrity, commented: “We’re delighted to be shortlisted. Our focus has always been to support licence-holders and technology businesses in meeting the Island’s high standards. This recognition reflects the hard work of our team, the value of expert led technical solutions and the value of clear, practical guidance for organisations across the sector.”
Public voting for the awards is now open and closes at 2pm on 27 November 2025.
Members of the public can vote by selecting a finalist in each category at: digitalisleofman.com/tech-awards/
Winners will be announced at the Digital Isle 2025 event on 27 November.
The post eGaming Integrity Shortlisted for Tech Supporter of the Year Award appeared first on European Gaming Industry News.
-
Latest News3 months ago
Duels for Friends in Trophy Hunter. Invite your friends and create a shared space for fun and competition.
-
Latest News2 months ago
Announcement: 25th September 2025
-
Latest News3 months ago
Flamez – A Fiery New Online Casino Contender from Ganadu
-
Latest News2 months ago
GR8 Tech’s Bet It Drives Wraps Season 1 with Stephen Crystal—From Las Vegas Legends to Global Gaming Leadership
-
Latest News2 months ago
AI-Powered Gamification Arrives on Vegangster Platform via Smartico
-
Latest News2 months ago
The Countdown is On: Less Than 3 Months to Go Until The Games of The Future 2025 Kicks Off in Abu Dhabi
-
Latest News2 weeks ago
JioBLAST Launches All Stars vs India powered by Campa Energy: A New Era of Creator-Driven Esports Entertainment
-
Latest News2 months ago
Adidas Arena Set to Welcome the 2026 Six Invitational




You must be logged in to post a comment Login