Min menu


CD Projekt Red data for sale online


The hackers, who targeted video game development company CD Projekt Red through a ransomware attack, are trying to sell the stolen source code they obtained at a multimillion-dollar auction.

The hack included important code related to prominent releases, such as The Witcher 3 and Cyberpunk 2077.

CD Projekt Red said it had no intention of negotiating with hackers, even if it meant that material stolen from the hack was spreading online.

Leaks of potentially valid source code information have begun to appear on forums, as reported on Twitter by the vx-underground cybersecurity account.

This initial leak is believed to include Gwent source code, while vx-underground revealed that auctions of the most valuable source code were taking place in a hacking forum known as Exploit.

But a cybersecurity firm called KELA, which specializes in providing threat intelligence to companies based on web analytics and dark societies, says it has reason to believe that auctions contain correct data.

"We believe this is a real auction from a real seller who has access to the data, where the seller offers to use a guarantor and allows those who have a deposit only to participate, a tactic that many sellers use to show that they are serious and to ensure that there is no fraud," she said.

"Our threat intelligence analyst, Victoria Kivilevich, was able to download some of the information provided to her by someone who claimed to have participated in the auctions," Kela said.

Kivelvić believes the data is original and said: "The auction provides source code for both the red engine and CDPR versions, including The Witcher 3: Wild Hunt and Thronebreaker: The Witcher Tales spinoff and Cyberpunk 2077.

The stolen material is also believed to contain internal documents, although it is unclear what types of documents or additional material the intruders have.

KELA says the initial price of the auction is $1 million, with bids rising in increments of $500,000 and the purchase price now at $7 million.

Users who deposit 0.1 Bitcoin can only participate, which is why Kivelovich believes that hackers are serious about hosting the auction and that the items for sale are likely to be true because they ensure that no one involved in the auction tries to trick sellers.