Hackers demand $10 million from Riot Games to stop ‘League of Legends’ source code leak

Hackers have stolen the source code for League of Legends, and now they’re asking $10 million from developer Riot Games.

Motherboard obtained a copy of a ransom email sent by the hackers to Riot Games. “Dear Riot Games,” it begins. “We have received your valuable data, including the valuable anti-cheat source code and all game code for League of Legends and its tools, as well as Packman, your custom anti-cheat mode. We understand the importance of these artifacts and the impact their release to the public would have on your core titles, Evaluation and League of Legends. In light of this, we are making a small exchange request of $10,000,000.”

As proof, the hackers provided Riot Games with two large PDF files that they said would prove they had access to Packman and League of Legends program code. The motherboard also received these files; they seem to show directories related to game code. If paid, the hackers promised to delete the code from their servers and “provide insight into how the breach occurred and offer advice to prevent future breaches,” according to the ransom note.

In the message, the hackers include a link to a Telegram chat where they say Riot Games he could talk to them. Motherboard joined this channel. Its members include usernames that match those of Riot Games names employees.

“We do not wish to damage your reputation or cause public disturbance. Our sole motivation is financial gain,” the ransom note said. The message has a deadline of 12 hours. “Failure to do so will publicize the hack and make the extent of the breach known to more people.”

Messy games first reported the news of a compromise last week in a series of tweets. The exact nature of the hack is unknown, but Riot Games called it a “social engineering attack.” It also said there was no indication that user data had been affected. On Tuesday, Riot Games said in a tweet it was confirmed that hackers stole the source code for League of Legends, Teamfight Tactics, and its “legacy” anti-cheat platform. Another tweet said that on Tuesday “we received a ransom email. Needless to say, we won’t pay.

“We also want to remind you that it would be a shame to see your company publicly exposed, especially when you pride yourself on your security measures,” the hackers said in their ransom note. “It’s disturbing to know that you can be hacked within a few hours of hacking at an amateur level.”

In response to a request for comment from Motherboard, Riot declined to add anything beyond the tweets already posted.

The full memo, without the Telegram chat link, is printed below.

Dear Riot Games,

We have received your valuable data, including the valuable anti-cheat source code and all game code for League of Legends and its tools, as well as Packman, your user anti-cheat mode. We understand the importance of these artifacts and the impact their release to the public would have on your core titles, Valorant and League of Legends. In light of this, we are making a small exchange request of $10,000,000.

We have uploaded a tree list pdf file where you can see the Packman tree and League of Legends source. If you need proof files, send us a message and we will provide you with the raw file.

In return, we will immediately remove all source code from our servers and ensure that the files are never published. We will also provide insight into how the breach occurred and offer advice to prevent future breaches. We suggest communicating via Telegram, you can join us here:

[Telegram link]

We don’t want to damage your reputation or cause public disturbance. Our only motivation is financial gain.

We have sent this message to directors only and have given you twelve hours to respond. Failure to do so will cause the hack to be publicized and the extent of the breach will be known to more people.

We also want to remind you that it would be a shame to have your company exposed in public, especially when you pride yourself on your security measures. It is alarming to know that you can be hacked within a few hours of hacking at an amateur level.

We urge you to take this matter seriously and consider our proposal.

Leave a Comment

Your email address will not be published. Required fields are marked *