Latest News
MMO game Street Mobster leaking data of 1.9 million users due to critical vulnerability


Attackers could exploit the SQL Injection flaw to compromise the game’s database and steal user data.
The CyberNews.com Investigation team discovered a critical vulnerability in Street Mobster, a browser-based massively multiplayer online game created by Bulgarian development company BigMage Studios.
Street Mobster is a free to play, browser-based online game in the mafia empire genre where players manage a fictional criminal enterprise. The game boasts a 1.9+ million player base and stores a user record database that can be accessed by threat actors by committing an SQL Injection (SQLi) attack on the game’s website.
Other games created by BigMage Studios are also potentially vulnerable to the same type of attack, which means that there is a possibility that even more users might be at risk.
The records that can be compromised by exploiting the SQLi vulnerability in Street Mobster potentially include the players’ usernames, email addresses, and passwords, as well as other game-related data that is stored on the database.
Fortunately, after we reported the vulnerability to BigMage Studios, CERT Bulgaria, and the Bulgarian data protection authority, the issue has been fixed by the developers and the user database is no longer accessible to potential attackers.
What is SQL Injection?
First found back in 1998, SQLi is deemed by the Open Web Application Security Project (OWASP) as the number one web application security risk.
Even though this vulnerability is relatively easy to fix, researchers found that 8% of websites and web applications are still vulnerable to SQLi attacks in 2020. Which, from a security perspective, is inexcusable. So much so, in fact, that UK internet service provider TalkTalk was hit with a record £400,000 fine over succumbing to a cyberattack that involved SQLi.
The vulnerability works by injecting an unexpected payload (a piece of code) into the input box on the website or in its URL address. Instead of reading the text as part of the URL, the website’s server reads the attacker’s payload as code and then proceeds to execute the attacker’s command or output data that would otherwise be inaccessible to unauthorized parties. Attackers can exploit SQLi even further by uploading pieces of code or even malware to the vulnerable server.
The fact that Street Mobster is susceptible to SQLi attacks clearly shows the disappointing and dangerous neglect of basic security practices on the part of the developers at BigMage Studios.
How we found this vulnerability
Our security team identified an SQL Injection vulnerability on the Street Mobster website and were able to confirm the vulnerability by performing a simple command injection test on the website URL. The CyberNews team did not extract any data from the vulnerable Street Mobster database.
What’s the impact of the vulnerability?
The data in the vulnerable Street Mobster database can be used in a variety of ways against the players whose information was exposed:
By injecting malicious payloads on Street Mobster’s server, attackers can potentially gain access to said server, where they can install malware on the game’s website and cause harm to the visitors – from using the players’ devices to mine cryptocurrency to redirecting them to other malicious websites, installing malware, and more.
The 1.9 million user credentials stored on the database can net the attackers user email addresses and passwords, which they can potentially use for credential stuffing attacks to hack the players’ accounts on other gaming platforms like Steam or other online services.
Because Street Mobster is a free-to-play game that incorporates microtransactions, bad actors could also make a lot of money from selling hacked player accounts on gray market websites.
What to do if you’ve been affected?
If you have a Street Mobster account, make sure to change your password immediately and make it as complex as possible. If you’ve been using your Street Mobster password on any other websites or services, change that password as well. This will prevent potential attackers from accessing your accounts on these websites in case they try to reuse your password for credential stuffing attacks.
However, it’s ultimately up to BigMage Studios to completely secure your Street Mobster account against attacks like SQLi.
Disclosure and lack of communication from BigMage Studios
Following our vulnerability disclosure guidelines, we notified the BigMage Studios about the leak on August 31, 2020. However, we received no reply. Our follow-up emails were left unanswered as well.
We then reached out to CERT Bulgaria on September 11 in order to help secure the website. CERT contacted the BigMage Studios and informed the company about the misconfiguration.
Throughout the disclosure process, BigMage Studios stayed radio silent and refused to get in touch with CyberNews.com. Due to this reason, we also notified the Bulgarian data protection agency about the incident on October 9 in the hopes that the agency would be able to pressure the company into fixing the issue.
Eventually, however, BigMage Studios appear to have fixed the SLQi vulnerability on streetmobster.com, without informing either CyberNews.com or CERT Bulgaria about that fact.
Source: Latest News on European Gaming Media Network
This is a Syndicated News piece. Photo credits or photo sources can be found on the source article: MMO game Street Mobster leaking data of 1.9 million users due to critical vulnerability

Latest News
Better Collective North American talent-led media brands surpass 1 billion views and downloads, providing new ways for partners to reach sports fans
An expanded focus on talent-led media and live events complements Better Collective’s broader strategy of diversifying revenue streams, engaging sports fans, and strengthening its position in key growth markets such as North America.
Talent-led media has become a core strategic focus for Better Collective, providing new ways to engage fans and create value for the company’s partners. Through shows hosted by world-class athletes and personalities such as Shaquille O’Neal, Jalen Brunson, Angel Reese, and Jeff Marek, Better Collective is able to reach highly engaged audiences across North America. These trusted voices not only help Better Collective stay relevant with younger sports fans but also offer partners authentic, direct access to these communities. Since the beginning of last year, content from Better Collective’s talent-led media brands have generated over one billion views and downloads and were significant contributors to the company’s global sponsorship revenue of more than 45 mEUR in 2024. Talent-led media has also further strengthened the commercial opportunities for partners and reinforces Better Collective’s position as a leading digital sports media group.
Karl Pugh, Group SVP of Revenue at Better Collective, said: “As a market leader operating at the intersection of sports media and sports betting, Better Collective provides partners with unparalleled global reach and commercial opportunities. Through our brands and their shows, we are not only reaching millions of engaged sports fans, but creating meaningful value for our partners by offering them direct access to these highly relevant audiences. With more than one billion views and downloads from fans across North America since the start of 2024, our brands have proven over time to be in high demand and an essential platform for partner activation. I look forward to continuing to grow these partnerships and unlocking new ways to drive revenue, audience engagement, and long-term business value together.”
All three of Better Collective’s leading North American brands, Playmaker HQ, Action Network and The Nation Network, have increased their audience with the help of talent-led media and live events.
- All five of Playmaker HQ’s shows have crossed 2 million total followers on social media, total over 15 million hours of consumed content on YouTube, and average 75 million monthly views across all accounts. The shows have gone viral several times, such as when Unapologetically Angel was named one of Spotify’s best new podcasts of 2024.
- Action Network’s content from leading betting experts has spurred growth as well, evident from its 600k+ hours of consumed content from fans this year. Additionally, the brand’s podcasts totalled 6 million downloads during the last NFL season, and will total 8 million total downloads in 2025.
- Within Canada, Better Collective has also experienced growth among its users thanks to The Nation Network (TNN), which has firmly entrenched itself as the leading destination for premier, digital sports coverage. Across its content this past year, TNN saw 71 million total streams, 5 million total watch hours, and 342 million total impressions on YouTube. These numbers reinforce Better Collective’s belief in Canada as a massive growth opportunity and market with immense potential.
North American brands are providing additional avenues for partner success
These three North American-based brands have each contributed to the company’s rise in the talent-led media space, growth in audience, and value generated for both endemic and non-endemic partners. Across the three brands, leading consumer and sportsbook partners include StockX, Dove Men’s+Care, Tommy John, DraftKings, bet365, Ford, Tim Hortons, Coca-Cola and Budweiser, exemplifying the value Better Collective offers its wide variety of partners in reaching new audiences in modern, engaging ways. These partners are not only getting value out of sponsoring podcast episodes, but also by helping create live activations that form deeper connections and more awareness among fans and potential consumers. Listeners and fans are also highly engaged with each brand’s content, leading to elevated brand exposure, increased content consumption, and higher turnouts at events. Examples of this can be seen with Action Network’s over 75% completion rate of its podcasts – above the average industry standard – as well as Playmaker HQ and TNN’s attendance at their live events, showing not only that fans have an appetite for the content, but that partners will get more exposure through their sponsorships and branded activations.
Live events have given our brands more ways to engage audiences
In addition to the popular podcast shows, Playmaker HQ, Action Network, and The Nation Network are all using their strong brand platforms to host live events. These include meet and greets, live shows, watch parties, and fan experiences that bring audiences closer to their favorite shows and stars. A standout example was last year’s live Roommates Show in Central Park, where thousands of fans gathered to meet Jalen Brunson and Josh Hart, enjoyed the show, and took part in branded experiences and giveaways from partners.
These events not only deepen fan engagement but also offer partners unique opportunities to connect with audiences beyond digital channels. Previous events have been held in major cities during some of the biggest sporting moments of the year, including the Super Bowl, the Stanley Cup Playoffs, the Final Four, and the 4 Nations Face Off. Throughout the rest of the year, our brands will continue to host exciting events for fans and partners alike, including the upcoming NBA Summer League.
The post Better Collective North American talent-led media brands surpass 1 billion views and downloads, providing new ways for partners to reach sports fans appeared first on European Gaming Industry News.
Latest News
iGB L!VE opens in London
The 2025 edition of iGB L!VE opened today (2nd July) at it’s new ExCeL London home. iGaming professionals made full use of ExCeL London’s transport infrastructure with Elizabeth Line and Docklands Light Railway trains full of visitors celebrating the show’s relocation to the Capital.
Organisers are seeking to grow the iGB L!VE attendance and, in the process set another record for the event. The 2024 edition, which was the last to be held in Amsterdam attracted 9,788 unique attendees, surpassing the 7,299 at iGB L!VE 2023 and was nearly double the 5,022 at iGB L!VE 2022. The 2025 edition of iGB L!VE will be the biggest on record, providing attendees with access to over 22,000 sqm of product innovation and inspiration.
Claire Williams OBE, the former leader of the Williams Formula 1 racing team and one of the most prominent and successful women in F1 history provided the iGB L!VE 2025 keynote.
Exploring the best practice parallels which can be drawn between the data-driven worlds of F1 and iGaming, Claire Williams noted: “There are a number of ways that Formula 1 can inspire businesses and provide tangible takeaways for iGaming operators of all sizes, from product innovation to navigating entry into new markets. As well as key requirements such as having a dynamic leadership, a culture of continuous improvement, hiring the very best problem solvers and being the first to embrace technology advances, F1 also demands the organisational agility that’s necessary to nuance strategy in what is an ultra-competitive space. “
Described as the TED of iGaming, iGB L!VE features a mix of highly practical case studies, data presentations and panel discussions on best practices across operators and affiliates. Topics include innovations in in-play betting, how to use IP and branding to protect competitive advantage, integrated marketing and SEO strategies, how to build links when no one wants to talk about gambling, as well as market dives into LatAm, UAE and Italy. The full programme can be viewed at:https://www.igblive.com/event-schedule
The post iGB L!VE opens in London appeared first on European Gaming Industry News.
Latest News
THE BATTLE OF POLYTOPIA ANNOUNCES GLOBAL WORLD CHAMPIONSHIPS WITH $10,000 PRIZE POOL
Midjiwan, the award-winning independent studio behind The Battle of Polytopia has today announced The Polytopia World Championship with a prize pool of $10,000 USD and a live final broadcast from Stockholm.
The Polytopia World Championship is set to launch this fall, uniting players from across the globe in an epic showdown of fast-paced strategic mastery. The tournament will be themed to Battle of the Tribes. Players will choose to compete with one of Polytopia’s 12 in-game tribes; each with a unique regional theme and skillset.
The tournament will begin with open qualifiers, giving everyone a chance to prove themselves. From there, players will advance through tribe-specific playoffs and head-to-head elimination rounds, each match bringing them one step closer to glory.
The top six players will earn a spot in the live finals in Stockholm on December 6: an in-person event streamed online for fans worldwide. In addition to live commentary of the tournament, the fan event will also provide behind-the-scenes content from the Midjiwan team.
The winner will be awarded a prize pool of $10,000; making this tournament the biggest competitive event in The Battle of Polytopia’s nine year history.
Christian Lovstedt, CEO of Midjiwan AB, commented: “This marks a major new step for Polytopia’s competitive scene, featuring a fresh tournament format and enhanced broadcasting that makes it even more exciting for viewers to watch, learn, and get inspired by the world’s top players.“
The matches will be played on the Polytopia Official Space on the Challengermode esports Platform.
The planned dates are:
September:
-
Sep 13–14
-
Sep 20–21
-
Sep 27–28
October:
-
Oct 4–5
-
Oct 11–12
-
Oct 18–19
November:
-
Oct 25–26
-
Nov 1–2
-
Nov 8–9
Nov 22–23
-
Faceoff
-
Final Qualifier
Dec 6
-
World Championship Live Event
The post THE BATTLE OF POLYTOPIA ANNOUNCES GLOBAL WORLD CHAMPIONSHIPS WITH $10,000 PRIZE POOL appeared first on European Gaming Industry News.
-
Latest News3 months ago
Exclusive Q&A With Bar Konson, Chief Business Development Officer at NuxGame
-
Latest News2 months ago
Week 17/2025 slot games releases
-
Latest News2 months ago
Fortuna Partners with 2025 UEFA Under-21 EURO
-
Latest News3 months ago
Esports World Cup Foundation Confirms Full Game Lineup, Schedule, and Club Championship Rules for EWC 2025
-
Latest News2 months ago
ELA Games Receives Key Nomination at EGR Marketing & Innovation Awards
-
Latest News3 months ago
DreamPlay consolidates its status as a global player in the iGaming industry and opens an office and campus in Cyprus
-
Latest News3 months ago
ACR POKER’S NEXT HIGH STAKES ADVENTURE TAKES PLAYERS TO MONTENEGRO FOR PRESTIGIOUS SUPER HIGH ROLLER SERIES
-
Latest News2 months ago
Bojoko.com Surpasses €100 Million in All-Time Deposits Milestone
You must be logged in to post a comment Login