Clash of Kings Breached; Users at Risk
Posted by: Timothy Weaver on 07/26/2016 10:28 AM
[
Comments
]
An out of date version of vBulletin is being blamed for the hack of the Clash of Kings forums.
Hackers managed to get away with 1.6 million players info that includes usernames, email addresses, IP addresses, device identifiers and (if players had logged in using their social network) Facebook data and access tokens of 1,597,717 players.
Passwords were also in the stolen data but were stored on servers in a hashed and salted manner. However, not all users are affected. Only users who registered an account on the Clash of Kings forum are at risk.
Clash of Kings has not announce the hack on their forums so users may not realized that they are at risk. A hacker with email data could trick users into revealing personal info or tempt them into clicking on links that would lead to malware.
Although the hackers used a vulnerability in vBulletin, the site has to take the majority of blame for not keeping the software up to date with versions that protect against current threats.
The hack is thought to have occured July 14th, but no announcement has been made so users do not know that their data is at risk.
Source: We Live Security
Hackers managed to get away with 1.6 million players info that includes usernames, email addresses, IP addresses, device identifiers and (if players had logged in using their social network) Facebook data and access tokens of 1,597,717 players.Passwords were also in the stolen data but were stored on servers in a hashed and salted manner. However, not all users are affected. Only users who registered an account on the Clash of Kings forum are at risk.
Clash of Kings has not announce the hack on their forums so users may not realized that they are at risk. A hacker with email data could trick users into revealing personal info or tempt them into clicking on links that would lead to malware.
Although the hackers used a vulnerability in vBulletin, the site has to take the majority of blame for not keeping the software up to date with versions that protect against current threats.
The hack is thought to have occured July 14th, but no announcement has been made so users do not know that their data is at risk.
Source: We Live Security
Comments
