[BreachExchange] Crytek hit by Egregor ransomware, Ubisoft data leaked

[Destry Winant]

https://www.bleepingcomputer.com/news/security/crytek-hit-by-egregor-ransomware-ubisoft-data-leaked/

The Egregor ransomware gang has hit game developer Crytek in a
confirmed ransomware attack and leaked what they claim are files
stolen from Ubisoft's network.

Ubisoft and Crytek are both well-known game developers with corporate
headquarters in France and Germany, respectively.

This week, the Egregor ransomware game posted archives containing
unencrypted files, stating that they were stolen from Ubisoft and
Crytek in unrelated attacks.

While it has not been confirmed if the attack against Ubisoft is
legitimate, BleepingComputer has confirmed that Crytek suffered a
ransomware attack.

If you have first-hand information about this or other unreported
cyberattacks, you can confidentially contact us on Signal at
+16469613731 or on Wire at @lawrenceabrams-bc.

Crytek hit by confirmed ransomware attack

This week, sources told BleepingComputer that Crytek had suffered an
attack at the hands of the Egregor ransomware operators.

While we were not told how many devices were encrypted, we were told
that files were encrypted and renamed to include the '.CRYTEK'
extension. For example, a file named test.jpg would have been
encrypted and renamed to test.jpg.CRYTEK.

In addition to encrypting the devices, the Egregor gang claims to have
stolen unencrypted files from Crytek and leaked a 380MB archive on
their data leak site.

Crytek data leak

This leaked data includes files related to WarFace, Crytek's canceled
Arena of Fate MOBA game, and their network operations.

Stolen Crytek data

BleepingComputer does not know when the attack took place,and our
emails to Crytek have not been answered.

Ubisoft's Watchdogs Legion source code allegedly stolen

Egregor ransomware also claimed to have breached Ubisoft's network and
stolen unencrypted data, including the source code for the upcoming
Watch Dogs: Legion game.

Ubisoft data leak

As part of this leak, Egregor has posted a 20MB archive containing
game assets the ransomware gang says are part of Ubisoft's Watch Dogs
game.

Game assets

None of these game assets, though, prove that they were actually
stolen from Ubisoft, and could easily have been obtained elsewhere.

Security researcher MalwareHunterTeam has told BleepingComputer that
they have been trying to warn Ubisoft for almost a year that their
employees have fallen victim to phishing attacks, but never received a
response.

Our emails to Ubisoft remain unanswered as well.