PC streaming service Shadow discloses safety breach

On the finish of September, we have been the sufferer of a social engineering assault focusing on considered one of our workers. This extremely refined assault started on the Discord platform with the downloading of malware below cowl of a sport on the Steam platform, proposed by an acquaintance of our worker, himself a sufferer of the identical assault.

Our safety crew took rapid motion. Regardless of our actions, the attacker was in a position to exploit one of many stolen cookies to connect with the administration interface of considered one of our SaaS suppliers. Due to this cookie, now deactivated, the attacker was in a position to extract, by way of our SaaS supplier’s API, sure personal details about you.