Hacker advertises for alleged database with 89 million Steam 2fa codes, source of the leak unknown

Energyweaponuser advertised a new archive on the dark web
You claim that it contains phone numbers and OTP codes for Steam
Some researchers claim that the archive comes from Twilio, but the company contested that they were injured

Energyweaponuser, a well-known cyber criminal and tasty, sells a new database that, as you claim, contains more than 89 million steam user records, telephone numbers and one-off access codes.

Steam is a Digital Games Distribution Platform developed by Valve. It has more than 130 million active users who use the platform for sale, download and play computer games.

A new thread recently appeared in an underground forum in which the hacker offered the database for 5,000 US dollars. Bleeping computer was one of those that analyzed the records and claims that it contains “historical SMS text message with unique passcodes for Steam, including the recipient's telephone number”.

Was it Twilio?

However, it is unclear where Energyweaponuser picked up the archives. The valve is silent at the moment. An independent game journalist Mellowonline1 believes that the theft is the result of a supplychain attack, with Twilio the most likely victim.

Twilio is a cloud communication platform with which DEVS can integrate various messaging, language and video functions. Among other things, it offers SMS and MMS messages that many companies use for one-off passcodes and 2FA.

However, the company told Bleed that it examined the claims and not found any evidence of compromises.

“There is no evidence that Twilio has been violated,” said a spokesman for the publication. “We checked a sample of the data found online and did not show that this data was received from Twilio.”

Another possible explanation is that an intermediary SMS provider could be violated. At the time of the press, the actual victim has not yet been confirmed. Energyweaponus' claims could not be checked at the moment. However, the tasty is quite notorious because he was previously connected to Cisco, Ford and HPE.

Steam warns the users to enable Steam Guard Mobile Authenticator and keep an eye on the activity of the account.

Over Bleed

Leave a Comment Cancel reply