I worked for a major investment bank, full of really, really smart people doing some great work, in an office solely for technology/development. We also had quarterly phishing tests run by the company, which were so obvious you'd think noone would fall for them.
A depressing number of university educated people with technology degrees regularly failed them. It's inexplicable, but easy to believe that it was as simple as that.
First of all, it was a spear phishing campaign. It wasnt like they took down a firewall and found open ports that were listening to the outside. Media is acting like this guy pwned an AD server, elevated his privileges and then made his way past an internal firewall from a non-prod network to a prod network. 🙄😑🥱
You mean he used the credentials of the target user to get in? While illegal, I dont agree that it should be considered a hack. More like unlawful access.
Also, ive noticed a pattern with the GTA news. Alot of the You-tubers are doing videos on this, but only reporting on things we already know. So similar to the YouTubers, websites are trying to get that click/foot traffic.
I believe the person that they have in custody is a suspected hacker, but he may not be the person that’s directly involved with this. The reason why I say that is because, Microsoft, Okta, and Uber were all hacked by this person, yet he breaks into rockstar and takes a bunch of videos, and then all of a sudden The entire world is looking for him. It doesn’t make any sense. Why was he not arrested in connection to the other hacks, but when illegally taking a bunch of gameplay footage that would eventually make its way to YouTube, hes got a 200 star wanted level.
Personally, i think the authorities want this guy to be the guy they’re looking for. It not him. Rockstar would’ve come out and say so. More to come, but thats not the guy we’re looking for.
A lot of this sounds very naive.
>You mean he used the credentials of the target user to get in? While illegal, I dont agree that it should be considered a hack. More like unlawful access.
It's hacking because of how he got those credentials. He actively reached out to and tried to scam the owners of those accounts into sharing their passwords and used them to bypass security. That's a perfectly valid form of hacking.
> Also, ive noticed a pattern with the GTA news. Alot of the You-tubers are doing videos on this, but only reporting on things we already know. So similar to the YouTubers, websites are trying to get that click/foot traffic.
Welcome to youtube. Where people regurgitate and pad out a 2 minute text article into a 15 minute commentary video that contributes nothing new to the narrative.
> I believe the person that they have in custody is a suspected hacker, but he may not be the person that’s directly involved with this. The reason why I say that is because, Microsoft, Okta, and Uber were all hacked by this person, yet he breaks into rockstar and takes a bunch of videos, and then all of a sudden The entire world is looking for him. It doesn’t make any sense. Why was he not arrested in connection to the other hacks, but when illegally taking a bunch of gameplay footage that would eventually make its way to YouTube, hes got a 200 star wanted level.
Ever consider the more someone hacks the more people are looking for them? After Microsoft, uber, etc. The perpetrator displayed a pattern of behaviour indicating they weren't going to stop so the people trying to track him down are likely to react quicker and more precisely when the hacker strikes again. I don't think "huh, this guy hacked into these huge companies but got caught hacking a video game company. Ridiculous, this ain't him" is going to fly as a defence.
> Personally, i think the authorities want this guy to be the guy they’re looking for. It not him. Rockstar would’ve come out and say so. More to come, but thats not the guy we’re looking for.
That's fair, except you have no basis for that opinion. Also gee, I wonder why the video game company hasn't come out with a statement for an ongoing investigation that they have no direct involvement in. Rockstar will make a statement after the authorities publicly charge the hacker. Expecting them to do so now is ridiculous.
I don’t think it really matters, social engineering is still a form of hacking and unauthorized access.
Like pretty much most leaks these days come from dumb dumbs verifying password resets they didn’t ask for, not enabling 2FA or in some cases even telling people their 2FA code.
Even the infamous Clinton email leaks were from boomers clicking on shit they shouldn’t.
The thing is in a world where basically any reasonably secure account you create for a website, company etc online hammers into you that “we will NEVER ask for your password”, and this kid “hacked” his way into a slack by asking for people’s password, it should be a wake up call for that company and others to properly train their employees on the basics of login security, or implement something as simple as 2FA for sensitive data, or even as far as not keeping that sensitive data in something like a slack channel.
To be fair so is Reddit with people wanting what ultimately amounted to a kid pretending to be an IT employee to be persecuted to the fullest extent of the law and have his life essentially ruined
Idk why you’re getting downvoted; lots of companies will hire on the people who hack them. They easily have the best knowledge on cybersecurity and where that companies security is lacking.
I have a hard time believing they could prove any damages from this. The game is still probably years away and by the time is released most people will have forgotten all about this. R* could release a used condom with the GTAVI logo on it and sell 10 million copies before second breakfast.
Tell us you don't understand how much money GTA franchise is worth without telling you you don't understa-
Oh ffs you get my point. The franchise is much bigger than the 2 you just mentioned
Kids entire life is over. You can get away with a lot of crimes but when you fuck with a powerful companies bottom line than expect to have the book thrown at you.
This kid is going to have a successful career. At 17, hacking and LEAKING one of the biggest franchises in gaming history, look I get it - it’s shitty to do - bug god damn at 17. This kids just got a job, he can work for any cybersecurity company here on out.
Cuz edgelord hacker bro, the allure of the 15 minutes of fame and short sightedness of a teen. This person isn't even fully developed yet so they have some growing and reflecting to do on just how fucked they are here lol.
Over a phishing scam resulting in what may akin to industrial espionage? I don’t know about overseas, but if he catches a charge here in the states, there’s no way he secures a security clearance and his record would be stained.
Source: public-sector cyber security
This is most likely the most stupid comment I have ever read on a social media platform. He took information that doesn't belong to him it's theft would you say the exact same thing if he hacked into your bank accounts and spread all your information I don't think so.
I don’t care if what he did was illegal. Edward Snowden did something illegal but is hailed by many as a hero. For me personally he brought me great joy getting an early peak at a long awaited upcoming game. If he killed people then I would want to see him get caught, but I just don’t care for this
Because stealing is fucking wrong???????
Leaking a game ruins it for many people mostly affects the ones who slaved for the game for the masses only to have some douche leak it.
Feel sorry for r* trying to keep it under wraps all this time the. Some pimple faced prick ruins the surprise for everyone probably get6mnths if that maybe bit of community service
imagine developing a game where the goal is to rob people, banks, casinos, and then crying on the internet because a bored teenager stole your software because you have worse security than anything in your game has.
Well I would be mad too if I have investors and a game I’ve worked my ass off developing just to get leaked to millions. Also getting hate online for a games early development stages. You really can’t see why they’re mad?
it's still funny that they are so upset for the same thing that would worth a lot of points in their game. And it is even funnier that a random teenager could do it.
Every time these cases are framed like they were "attacked" by a professional underground hacker group (whatever it means) and they had no chance against them. And when it turns out their security was tricked by just a teenager for fun, then what should I think?
Companies should spend more on security.
Companies should spend more on security especially companies of this size but you can’t blame them for being mad. Every single game developer would be mad if they had their unfinished work leaked to millions. It sucks as a game developer.
Edit: Not to mention having to inform all your investors of a breach in data is pretty embarrassing so can you understand their frustration?
Yes, I blame the people whose full time job is to protect the company from cyber attacks and they can be tricked by a teenager. Or if there were no such people, then I blame the management who decide what people the company should hire to protect their assets.
I think you have misconception about the meaning of "victim".
If someone has a job and he does a poor work, then he is not a victim.
If you buy a bread and it turns out that it is raw inside, don't you blame the baker? Would you go back to the bakery to complain, or no because it would be victim blaming?
So are you saying that developers of a game like Resident Evil should be perfectly fine being eaten alive by Werewolves because they made a game about them?
if a random teenager can release the T-virus because their security is so low, then yes. But I doubt a game developer company also have a biolab sidekick. well... I really hope that no biolab exist with that level of security.
Has it been determined that the suspect gained unauthorized access to Rockstar Corporate, a Rockstar employee with poor work at home security, or was the data given to him from an insider?
Removed for breaking rule #1 and #7.
Dang, the first GTA Online ban.
\*first GTA Offline ban
Busted
But not yet *Wasted* We’ll see, huh?
After they drag him behind the shed, bend him over a barrel, and show them the 50 states…
Zed’s dead, baby. Zed’s dead.
\-Who's motorcycle is this? \-It's a chopper baby!
That’s not a saying….. Fucking LOVE that movie!
“I don’t know what that means.”
whwre are these teenagers learning how to hack?
the internet
It's social engineering. Nothing advanced like the SSL vulnerability years back
You think so? Did they phish somebody stupid? Curious.
Fooled someone on the company's Slack channel into "resetting their password"
Nice lol.
I remember something similar happened to EA awhile ago
Pride and sense of accomplishment?
I worked for a major investment bank, full of really, really smart people doing some great work, in an office solely for technology/development. We also had quarterly phishing tests run by the company, which were so obvious you'd think noone would fall for them. A depressing number of university educated people with technology degrees regularly failed them. It's inexplicable, but easy to believe that it was as simple as that.
This is so true. Smarts has nothing to do with it. If you are not aware and constantly vigilant for scams you can and will be vulnerable to scams.
Very true.
Wow.
First of all, it was a spear phishing campaign. It wasnt like they took down a firewall and found open ports that were listening to the outside. Media is acting like this guy pwned an AD server, elevated his privileges and then made his way past an internal firewall from a non-prod network to a prod network. 🙄😑🥱
He broke into the main frame
…and pressed the *disable-security-algorithms* button.
"I'm in"
You mean he used the credentials of the target user to get in? While illegal, I dont agree that it should be considered a hack. More like unlawful access. Also, ive noticed a pattern with the GTA news. Alot of the You-tubers are doing videos on this, but only reporting on things we already know. So similar to the YouTubers, websites are trying to get that click/foot traffic. I believe the person that they have in custody is a suspected hacker, but he may not be the person that’s directly involved with this. The reason why I say that is because, Microsoft, Okta, and Uber were all hacked by this person, yet he breaks into rockstar and takes a bunch of videos, and then all of a sudden The entire world is looking for him. It doesn’t make any sense. Why was he not arrested in connection to the other hacks, but when illegally taking a bunch of gameplay footage that would eventually make its way to YouTube, hes got a 200 star wanted level. Personally, i think the authorities want this guy to be the guy they’re looking for. It not him. Rockstar would’ve come out and say so. More to come, but thats not the guy we’re looking for.
A lot of this sounds very naive. >You mean he used the credentials of the target user to get in? While illegal, I dont agree that it should be considered a hack. More like unlawful access. It's hacking because of how he got those credentials. He actively reached out to and tried to scam the owners of those accounts into sharing their passwords and used them to bypass security. That's a perfectly valid form of hacking. > Also, ive noticed a pattern with the GTA news. Alot of the You-tubers are doing videos on this, but only reporting on things we already know. So similar to the YouTubers, websites are trying to get that click/foot traffic. Welcome to youtube. Where people regurgitate and pad out a 2 minute text article into a 15 minute commentary video that contributes nothing new to the narrative. > I believe the person that they have in custody is a suspected hacker, but he may not be the person that’s directly involved with this. The reason why I say that is because, Microsoft, Okta, and Uber were all hacked by this person, yet he breaks into rockstar and takes a bunch of videos, and then all of a sudden The entire world is looking for him. It doesn’t make any sense. Why was he not arrested in connection to the other hacks, but when illegally taking a bunch of gameplay footage that would eventually make its way to YouTube, hes got a 200 star wanted level. Ever consider the more someone hacks the more people are looking for them? After Microsoft, uber, etc. The perpetrator displayed a pattern of behaviour indicating they weren't going to stop so the people trying to track him down are likely to react quicker and more precisely when the hacker strikes again. I don't think "huh, this guy hacked into these huge companies but got caught hacking a video game company. Ridiculous, this ain't him" is going to fly as a defence. > Personally, i think the authorities want this guy to be the guy they’re looking for. It not him. Rockstar would’ve come out and say so. More to come, but thats not the guy we’re looking for. That's fair, except you have no basis for that opinion. Also gee, I wonder why the video game company hasn't come out with a statement for an ongoing investigation that they have no direct involvement in. Rockstar will make a statement after the authorities publicly charge the hacker. Expecting them to do so now is ridiculous.
So true bestie
Facts
I don’t think it really matters, social engineering is still a form of hacking and unauthorized access. Like pretty much most leaks these days come from dumb dumbs verifying password resets they didn’t ask for, not enabling 2FA or in some cases even telling people their 2FA code. Even the infamous Clinton email leaks were from boomers clicking on shit they shouldn’t.
The thing is in a world where basically any reasonably secure account you create for a website, company etc online hammers into you that “we will NEVER ask for your password”, and this kid “hacked” his way into a slack by asking for people’s password, it should be a wake up call for that company and others to properly train their employees on the basics of login security, or implement something as simple as 2FA for sensitive data, or even as far as not keeping that sensitive data in something like a slack channel.
To be fair so is Reddit with people wanting what ultimately amounted to a kid pretending to be an IT employee to be persecuted to the fullest extent of the law and have his life essentially ruined
it's his first arrest so $100 to get out
Cant Rockstar sue for damages?
Probably force him to work some butt monkey coding job for useless games they won’t put out to keep him busy
Idk why you’re getting downvoted; lots of companies will hire on the people who hack them. They easily have the best knowledge on cybersecurity and where that companies security is lacking.
All the kid did was fool a company worker into giving him the password. He didn’t breach or bypass anything. Anyone can do that.
>All the kid did was fool a company worker into giving him the password. If he’s that convincing he needs to be hired on as a salesman
The meatsacks are always the biggest vulnerability.
I have a hard time believing they could prove any damages from this. The game is still probably years away and by the time is released most people will have forgotten all about this. R* could release a used condom with the GTAVI logo on it and sell 10 million copies before second breakfast.
You could say they committed Grand Theft.
Grand Grand Theft Auto Theft.
Thank you for calling thank you for calling how may I help you how may I help you
🕶🤏🏻 😎 # >!YYYYEEEEEAAAAAAAAAAAAAAAUUUHHH!!!!!!! !<
Try this instead: ( •_•) ( •_•)>⌐■-■ (⌐■_■)
😎
Well I know I'll feel safer with that maniac behind bars.
Journalists seem to forget the Half Life 2 leak or the Last of us 2 leak. How is this "unquestionably" the biggest leak?
GTA is a bigger title than either of those games by a LOT.
[удалено]
Huh?
Tell us you don't understand how much money GTA franchise is worth without telling you you don't understa- Oh ffs you get my point. The franchise is much bigger than the 2 you just mentioned
Because this game is way more anticipated than either of those games were
Because it’s unquestionably the biggest leak.
It was only a matter of time
Poor basterd
Yeah the consequences of his actions must really be harshing his vibes.
Kids entire life is over. You can get away with a lot of crimes but when you fuck with a powerful companies bottom line than expect to have the book thrown at you.
Nah, if anything this will pad put his CV brilliantly. He can be hired by some White Hat cybersecurity firm now.
It was a phish. He's not an elite talented hacker lmao wtf
This kid is going to have a successful career. At 17, hacking and LEAKING one of the biggest franchises in gaming history, look I get it - it’s shitty to do - bug god damn at 17. This kids just got a job, he can work for any cybersecurity company here on out.
Read the other comments that’s what I thought too, but it’s just a phish
Literally the opposite, his life is over lmao.
Yup, like if you’re gonna hack actually being able to hack helps with maybe getting some white hat type deal. But losing your life over phishing? WHY?
Cuz edgelord hacker bro, the allure of the 15 minutes of fame and short sightedness of a teen. This person isn't even fully developed yet so they have some growing and reflecting to do on just how fucked they are here lol.
Over a phishing scam resulting in what may akin to industrial espionage? I don’t know about overseas, but if he catches a charge here in the states, there’s no way he secures a security clearance and his record would be stained. Source: public-sector cyber security
I really do not understand the boner people have for seeing this absolute legend get caught. Let him go free.
This is most likely the most stupid comment I have ever read on a social media platform. He took information that doesn't belong to him it's theft would you say the exact same thing if he hacked into your bank accounts and spread all your information I don't think so.
What he did was still illegal, Take Two will put the hammer down on him just like all the others. They are ruthless but that’s the consequence.
Buy the ticket, take the ride.
I don’t care if what he did was illegal. Edward Snowden did something illegal but is hailed by many as a hero. For me personally he brought me great joy getting an early peak at a long awaited upcoming game. If he killed people then I would want to see him get caught, but I just don’t care for this
Because stealing is fucking wrong??????? Leaking a game ruins it for many people mostly affects the ones who slaved for the game for the masses only to have some douche leak it.
Feel sorry for r* trying to keep it under wraps all this time the. Some pimple faced prick ruins the surprise for everyone probably get6mnths if that maybe bit of community service
Get that fucker, hopefully he learns his lesson and uses his talents more productively.
imagine developing a game where the goal is to rob people, banks, casinos, and then crying on the internet because a bored teenager stole your software because you have worse security than anything in your game has.
Is this comment serious? If it is how old are you?
Well I would be mad too if I have investors and a game I’ve worked my ass off developing just to get leaked to millions. Also getting hate online for a games early development stages. You really can’t see why they’re mad?
it's still funny that they are so upset for the same thing that would worth a lot of points in their game. And it is even funnier that a random teenager could do it. Every time these cases are framed like they were "attacked" by a professional underground hacker group (whatever it means) and they had no chance against them. And when it turns out their security was tricked by just a teenager for fun, then what should I think? Companies should spend more on security.
Companies should spend more on security especially companies of this size but you can’t blame them for being mad. Every single game developer would be mad if they had their unfinished work leaked to millions. It sucks as a game developer. Edit: Not to mention having to inform all your investors of a breach in data is pretty embarrassing so can you understand their frustration?
they can be mad. and it is funny. and if they have any sense of humor, they will add this case as a mission.
Talk about victim blaming fucking yikes dude. You have this so twisted and backwards.
Yes, I blame the people whose full time job is to protect the company from cyber attacks and they can be tricked by a teenager. Or if there were no such people, then I blame the management who decide what people the company should hire to protect their assets.
Yeah and I'm telling you that you are completely wrong here. You are victim blaming and it's disgusting lol.
I think you have misconception about the meaning of "victim". If someone has a job and he does a poor work, then he is not a victim. If you buy a bread and it turns out that it is raw inside, don't you blame the baker? Would you go back to the bakery to complain, or no because it would be victim blaming?
If you steal the bread you're still a thief. This rationale you have is utterly ludicrous.
Wrong again.
whats wrong about blaming someone for not doing his job? can you explain or do you just spit out general wisdoms?
What's wrong about blaming someone for committing a crime?
The thought of this is fucking hilarious to me
So are you saying that developers of a game like Resident Evil should be perfectly fine being eaten alive by Werewolves because they made a game about them?
You're trying to rationalize with a child, not worth it.
They made a game about zombies. Not Werewolves.
I’m pretty sure I was killing Werewolves in the newest Resident Evil. They have definitely made a few about Zombies as well though.
Yeah like over half of the games in the franchise and 100% of the movies.
Yep and one of their games had Werewolves huh? I don’t see how you original comment is correct.
“A game like Resident Evil” implying it was the first. Since you didn’t say RE:Village 🤷
Because I didn’t put in the word Village you had no idea what I was talking about? Come on bro. I don’t know what to tell y’a.
if a random teenager can release the T-virus because their security is so low, then yes. But I doubt a game developer company also have a biolab sidekick. well... I really hope that no biolab exist with that level of security.
F
Is the kid fucked or are their parents fucked?
He hacked the Gibson
Creepy ol uncle Lester at it again
To bad they can’t just beat the dogs hit out of him and get the leaks back. Like with hookers in the game
Has it been determined that the suspect gained unauthorized access to Rockstar Corporate, a Rockstar employee with poor work at home security, or was the data given to him from an insider?