New: here is how hackers broke into EA games and stole a ton of code/internal tools
- bought cookie online for $10
- logged into EA Slack
- trick IT support to give login token for EA network

"We explain to them we lost our phone at a party last night"https://t.co/BR9poVFT6z

— Joseph Cox (@josephfcox) June 11, 2021

NEW: Hackers claim to have stolen and are actively trying to sell 780 gigabytes of data from Electronic Arts, including source code for FIFA 21.

EA confirmed data breach but said "a limited amount of game source code and related tools were stolen." https://t.co/lA4paWWIHs

— Lorenzo Franceschi-Bicchierai (@lorenzofb) June 10, 2021

If I was EA I'd just dare the hackers to try and make something with Frostbite tbh
https://t.co/dCCxkocXfd

— Rami Ismail (رامي) (@tha_rami) June 10, 2021

Hackers ignored the NHL series, just like EA has done for the past decade https://t.co/dqMLvzwhAk

— Josh Hyman (@joshhymanNHL) June 11, 2021

I'm sure some people will claim this is about covid and wfh but this is really just an example of how immature technology like Slack gets integrated into workflows without people considering all the vulnerabilities in their security model https://t.co/CgnndCgb2R

— Katelyn Gadd (@antumbral) June 11, 2021

Started with hackers buying cookies online. These can save the login details for a user to a particular service; if you have that, you can potentially log in as them. The hackers did this to get into EA's Slack https://t.co/BR9poVFT6z pic.twitter.com/izDDOh4eQR

— Joseph Cox (@josephfcox) June 11, 2021

The group of hackers that stole a wealth of data from game publishing giant Electronic Arts broke into the company in part by tricking an employee over Slack to provide a login token, Motherboard has learned. https://t.co/IbTtQB6pa3

— Hamza Shaban (@hshaban) June 11, 2021

Multifactor authentication: We got this.
Slack: ???‍☠️ https://t.co/B7O8II6CKT

— Katie Moussouris (she/her) is fully vaccinated (@k8em0) June 11, 2021

Once inside the Slack, the hackers then pretended they were a worker who had lost their phone, so they needed their multifactor authentication code. EA IT support gave it https://t.co/BR9poVFT6z pic.twitter.com/PiRMGGbepl

— Joseph Cox (@josephfcox) June 11, 2021

Data-thieving hackers strike again, stealing EA source code and police data https://t.co/PLOXyNNMfL

— Umair Akbar (@akbarth3great) June 10, 2021

This is absolutely fascinating. New attack vectors coming from all over... https://t.co/2XRhfDPl7a

— Mike Masnick (@mmasnick) June 11, 2021

Pretty ingenious - both purchasing the cookies and doing social engineering from inside Slack. When social engineering is coming from someone inside the company's Slack channel, it's assumed they're legitimate employee, and any caution IT might normally have gets dropped. https://t.co/0BeCqcL3WE

— Kim Zetter (@KimZetter) June 11, 2021

Then once inside the main EA network, the hackers found another development service. They created a virtual machine, accessed another service, and downloaded the source code https://t.co/BR9poVFT6z pic.twitter.com/SphVLUbYBR

— Joseph Cox (@josephfcox) June 11, 2021

The hackers who stole source code and documents from Electronic Arts broke in through the company's Slack.

"Once inside the chat, we messaged a IT Support members we explain to them we lost our phone at a party last night." https://t.co/JkPivyX6oP pic.twitter.com/D6wEShFacR

— Lorenzo Franceschi-Bicchierai (@lorenzofb) June 11, 2021

Scoop: games giant EA hacked. Hackers say they have 780GB of data, including source code for FIFA 21 and the Frostbite engine, used in games like Battlefield. EA confirmed breach and the items impacted. Hackers are trying to sell data on underground forums https://t.co/wjERHqOcrc

— Joseph Cox (@josephfcox) June 10, 2021

Hackers bought login cookies belonging to an EA employee for $10 from the dark web. Used them to login to Slack then told IT the employee lost their phone so to provide them 2FA tokens directly. Then stole code.

Real life hacking’s nothing like the movieshttps://t.co/oC6AwXDvF1

— Dare Obasanjo (@Carnage4Life) June 11, 2021

Slack is often thought of as a fully trusted internal channel — orgs wrongly believe social engineering can’t happen there. When hacking I commonly target IT Support 1st, requests to IT Support like the EA intrusion “lost phone, still need network access, please help” work often. https://t.co/AJw5vkVaII

— Rachel Tobac (@RachelTobac) June 11, 2021

Video call verify if your IT department received password/2-factor reset requests via Slack or other chat platforms.
If your IT admins aren't familiar with your users enough to recognize them in a video call... well, maybe work on that. https://t.co/3ULwK4GmWt

— Chris Vickery (@VickerySec) June 11, 2021