Riot Game Hacked

[Alacoque Whitchurch]

Inthe message, the hackers included a link to a Telegram chat where they said Riot Games could speak with them. Motherboard joined this channel. Its members included usernames that matched those of names of Riot Games employees.

We have obtained your valuable data, including the precious anti-cheat source code and the entire game code for League of Legends and its tools, as well as Packman, your usermode anti-cheat. We understand the significance of these artifacts and the impact their release to the public would have on your major titles, Valorant and League of Legends. In light of this, we are making a small request for an exchange of $10,000,000.

In return, we will immediately remove all source code from our servers and guarantee that the files will never be released to the public. We will also provide insight into how the breach occurred and offer advice on preventing future breaches. We suggest communicating through Telegram, you can join us here:

We have sent this message to the Directors only and have given you twelve hours to respond. Failure to do so will result in the hack being made public and the extent of the breach being known to more individuals.

We also want to remind you that it would be a shame to see your company publicly exposed, especially when you take great pride in your security measures. It is alarming to know that you can be hacked within a matter of hours by an amateur-level hack.

So I played a ranked game and played terribly. Normal for me, but that was 2 days ago. When I log on this morning, I notice my banner, settings, enemy outline color, cross hair, etc. Are all changed. I thought it was a friend of mine that wanted to play on my account at first, but after asking and no one knowing anything I looked further into my match history. The person who used my account while I was at work, played 2 games and friended 3 people. The first game they played was with the top fragger in the last game I actually played (I did NOT friend them yet they were on my friends list) and the second game was in a high plat/ diamond lobby and the account stealer topped team with a 77% headshot. By now I've changed all my passwords and plan to try to get some info out of the new additions to my friends list, but I hope that riot doesn't think that I was hacking cause I average 11% hs. Anyways this was a very weird thing so I thought I would share.

This is a very weird and confusing situation. But given the circumstances, it dosen't seem like Riot has enough reasons to ban you, since you caught it early (but again, it would be very difficult not to notice this) and it was only 2 games, so Riot probably gave you the benefit of the doubt. Riot knows that a lot of their players, especially beginner players, are very inconsistent in their performance, like you can absolutely pop off one game and totally bottom-frag in the next game, and this is normal and expected. And luckily, since the account-stealer did not do anything that obviously and blatantly broke the rules, it sort of just flew under the radar.

I think you did the right thing of immediately changing your passwords after you found out, but I also recommend you use multi-factor verification (it is a pain, I know) but it would make it significantly harder for a hacker to guess your password again, since they apparently already got it the first time-somehow. Though I am not a cyber-security expert, I would also recommend you to check any other accounts for suspicous activity, especially if you use the same password for multiple accounts (I'll admit that I do that for not-super-important stuff like game accounts), as well as scanning your computer for any viruses or malware, and if you find any, to get expert help on how to properly remove all of it from your device. You are smart to not put the name or anything that identified your account on here, since it is unfortunately too easy for a person who is caught doing something bad to just claim "I was hacked", and your account might be banned or at least suspended for a while as a precaution because it has been hacked, and also sharing accounts is very much against the rules.

Also, the thing I found strange about this is why are they targeting your account in particular? What is so special about your account that warrants someone to put all this extra effort into breaking into your account and changing all the settings on it just to play a couple games of Valorant? That doesn't even make any sense - like what are their motives here? So I think it is much more likely that someone who you actually know in real life and has access to your computer saw you left your account open and seized the opportunity to do this. But of course they won't own up to it since you don't have any concrete evidence that points to them.

So what I suggest you do is to log out of everything before you go to work, since if they can physically access your Valorant account, they can mess with other stuff on your computer as well, and I also suggest you to not save any passwords of sensitive information, (even if it is convenient), and to set a password on your computer as well and lock it every day before you go to work. These steps would also help prevent unauthorized access even if you are not sure who the culprit was.

I truly hope that your account didn't get banned, and that this would never happen again. You may or may not have gotten to the bottom of this, but hey, at least you might have made some new friends with the people who suddenly appeared in your friends list, and had a laugh about this. I know that this is 1 year late, but I hope you are doing well now. ?

In this post, I'll show you how to rediscover the email of your 8-year-old RIOT account (which you obviously registered with a bullshit email). From a security perspective, ill paint an attack scenario demonstrating the risks of buying RIOT accounts & how someone with malicious intentions could go about hijacking it.

This is the attack scenario: I'm a bad guy and I've obtained your riot account credentials. Naturally, the first thing I'd try is to login to Riot's main webpage Since the login is a username and password I don't know what email the account is bound to. My goal as a bad guy is to identify the email address associated with the account through Riot's ticketing systems and hope that the password of the account is being reused on the email.

Keep in mind that you need email access to properly perform account authentication to perform a full account takeover by accessing the accounts settings. Here is where you might hit a brick wall. If you're not redirected to the accounts settings page you'll be presented with the following image.

To obtain this code you'll need access to that account's email. Now like me if you've forgotten the email you used to register your account you're pissed off. To my knowledge, besides the way I'm about to show you I haven't found another way to disclose account emails (but I'm sure there are other ways). To obtain the account's email you will need to head over to -leagueoflegends.riotgames.com/hc/en-us/requests. You won't need any 2FA checks or additional information past the username and password of the account.

If not, you will need to create a "General Question" ticket. If you submit any other type of tickets such as a "Ban or Restriction" then that account will be locked by support as those processes seem to require a long list of additional identifying information. It genuinely doesn't matter what you ask here, the only goal is to have the account create a ticket.

Once you have a ticket created since they're using Zendesk simply open the ticket and view the source of the page. At the complete bottom, you'll find the email tied to that League of Legends account.

All vulnerabilities discovered in account boosting sites have been responsibly disclosed to the site owners and are remediated. Additionally, all screenshots are from accounts I personally created and own. This is simply to illustrate an attack scenario and to help you recover your account email should you ever happen to forget.

Lastly, this blog is a result of Riot Games suspending my GrandMaster account because I couldn't remember the email tied to that account. While submitting a support ticket to identify my account's email the account was suspended as I couldn't be vetted as the legitimate owner.

My riot games account was hijacked. A letter came to my mail, saying that the mail of Riot games has been changed. Passwords don't fit either. I started hammering into the technical support, I create a ticket, a letter comes to the mail, here the ticket is created, you can track it using this link. The link is not working, it gives out "the page you are looking for does not exist". I wrote several times, as a result, there is no answer for more than a day. Does anyone know what to do in a similar situation?

I found out about its existence only when I went through the settings of the second account. Anyway, I did not receive any notifications about logging into my account or requests to change my mail. It was like, "they changed your mail here, be strong."

it will take some time. If you spent money, they can track your transactions along as you show proof of it. They might ask you questions regarding, when you first spent money, what was your first skin, battlepass etc etc. Thats what i did and i recovered my brothers account as he got scammed while trying to trade accs.

if you were hacked......

Click on the transaction in your paypal account and use the 'report a problem' link at the bottom to report it as unauthorised if that is what it was.

An unauthorised transaction means that your Paypal account was hacked and used without your consent.

If Paypal check IP addresses / devices etc and find that it was hacked then yes you should receive your refund.

I hope you changed your password and security questions?

I hope you ran a virus scan on your computer?

I would also be telling my card issuers and bank accounts company that the account was hacked so that they can keep an eye on your account OR remove the financial info involved until things are sorted.

3a8082e126