Playing the game peacefully, more than 1 million gamers have their information stolen by hackers and auctioned

Stalker Online is a game MMO The famous open world is developed based on the book “Roadside Picnic” by writers Arkady and Boris Strutgatsky. Stalker Online is set in a land where the glory days of humanity have long since disappeared, resources are scarce, danger lurks everywhere. The game was developed by Australian studio BigWorld Technology and officially launched in the fall of 2019.​

​

Recently, Stalker Online became a victim of a hacker, this hacker has infiltrated the game and stolen the information of 1.3 Stalker Online gamers. After that, he sold their information on hacker forums and obtained a certain amount of BitCoin, but the specific number is unknown so far.

Currently, this hacker has in hand the password, email, address, phone number, name and IP address of the user. To prove the hack, the hacker even posted a public message on the game’s homepage, threatening to release the victims’ personal information online if they didn’t immediately contact him. After that, this guy posted an auction of the victim’s information on a digital store that had just been established for nearly a month.​

​

Stalker Online uses the MD5 hashtag algorithm to protect the password on the database, so that it doesn’t show up as plain text. While this is a pretty viable defense, one of MD5’s weaknesses is its inability to withstand prolonged attacks, breaking encrypted information, and reprocessing information within a timeframe. Specifically. That’s why the information of more than 1 million gamers fell into the hands of hackers.​

​

The developer encourages players to change their game password immediately, if it matches the password of other accounts, change all of them. Their information can be used for ransom or used as a tool for fraud. Fortunately, no more sensitive information such as credit card numbers or social security numbers was exposed. However, it is still better for everyone to be careful, it is best not to use the same password for all accounts to prevent similar situations from happening.​