Twitch, the live-streaming service used primarily by gamers, was recently attacked and at least 128Gb of data has been leaked onto the 4Chan forum. The data allegedly consists of vast volumes of sensitive data – everything from payments made to content creators to an unreleased gaming platform, from internal ‘Red Team’ hacking tools to the entirety of Twitch’s source code, the most valuable asset of any digital platform provider. The impact could be huge. With an estimated 51 million users, it will be an additional concern that Google searches for ‘How to delete Twitch’ rose by 733% on the day the news broke. It could prove to be a company killer.
Archie Agarwal, CEO of New Jersey cybersecurity firm ThreatModeler, told The Guardian: “How on earth did someone exfiltrate 125GB of the most sensitive data imaginable without tripping a single alarm?”
Dark Intelligence has reviewed all the incoming darknet traffic – connections coming from the likes of the TOR browser – towards the twitch.tv domain. Amongst the high volumes of darknet traffic aimed at Ports 80 and 443 – the standard internet connection ports – Dark Intelligence discovered a small number (<1%) of connections aimed at irc.chat.twitch.tv via Port 6667, the most recent of which was on October 3. This port is used by internet relay chat (IRC), a popular messaging service in the early 2000s but has steadily declined in use. However, there are still a significant number of people using IRC – including Twitch, who use it to allow developers to create chat functionality to their Twitch channel. In June 2010, the main IRC servers were hacked, and the download was replaced by a version that had been compromised with a trojan backdoor.
No tags.
