I was recently the target of a social engineering attack via Discord.
A friend's account, who had previously been attacked by the same group, was used to ask me to download a game they were working on and send them my feedback.
The executable contained malware...
Although I cannot verify it, the attackers claim to have extracted the Gladiabots player database.
In addition to game-specific data that has no monetary value, the database contains the following info:
- the email address of players who played the game on multiple devices
=> If this is your case, please be extra careful with the emails you receive, as other phishing attempts may arise.
- the IP address of most players
=> Make sure you use up-to-date antivirus, firewall, and anti-malware software.
As you know, the game does not use any passwords, so your other game or website accounts should not be impacted.
It also does not store any banking data since the in-app purchases are made via Google, Steam or Apple.
I would like to apologize for the lack of caution on my part.
I will definitely be more careful in the future.
Update: email addresses are now stored in encrypted form in the database