Just two days following a ransomware attack on The Witcher developer CD Projekt Red, their assets have begun to leak online. On Monday, CD Projekt Red announced that a hacker group had dumped full copies of Cyberpunk 2077, The Witcher 3, Gwent, and an unreleased version of The Witcher 3. They also claimed to have access to "documents related to accounting, administration, legal, HR, investor relations and more." However, CD Projekt Red stated they were unwilling to give in to their demands, and the leaks have reportedly already begun.

According to the Twitter page for vx-underground, a self-described "collection of malware source code, samples, and papers," the source code for Gwent, a card game in the Witcher universe, has been leaked online. While links are being taken down quickly, journalists from Motherboard, Vice Magazine's technology division, were reportedly able to download a copy and verify its authenticity. They claim the download is larger than a legitimate Gwent download, has assets pertaining to several different versions of Gwent, and has "what appear to be Testframework files, software game developers use to test applications." Also according to Motherboard, a note reading "next release is tomorrow" was in the download folder, as well.

It appears that the hackers have not given up on getting money out of this, yet, however. In a follow-up Tweet, vx-underground claims that the hackers will be auctioning off the source code for Cyberpunk 2077 and The Witcher 3, with a starting bid of $1,000 USD, on the Exploit forums, a popular hacking website. It is unclear if the Witcher 3 source code they are referring to is the unreleased version alluded to in the note from the initial attack, or if it the officially released version.

The sharing of stolen, copyrighted material is illegal and, thus, against the site's rules. Please do not ask for illegal files. Please do not post illegal files. Please do not share links to sites that host illegal warez. Failure to adhere will result in account suspensions or permanent bans.

CD Projekt Red's ransomed data has been leaked online. pic.twitter.com/T4Zzqfn78F

— vx-underground (@vxunderground) February 10, 2021

[UPDATE]

It was originally reported by vx-underground that the opening bid for the Witcher 3 and Cyberpunk source code would $1000 USD. This was apparently a typo, and the opening bid will instead be $1,000,000 USD. They will also sell immediately for $7,000,000 USD.

Update: a mistake was made. They stated starting bid $1kk. This was assumed as a typo for $1,000. They meant $1,000,000. They are also selling immediately for $7,000,000.

Attached images supplied by @DrFurfagMD pic.twitter.com/JnOcwnGqZk

— vx-underground (@vxunderground) February 10, 2021

 

[BigOnYa]

There are some ebay a like options for the criminal set but most of these sorts of things are untraceable emails to a place with a sealed bid. They either then take the best choice available or at least the highest that is clearly not the police.
Haven't seen what they requested here though.

Isn't today they're cutoff, I think they said 48 hours

 

[xdarkx]

Isn't today they're cutoff, I think they said 48 hours

CDPR received the ransomware noticed on Feb 8, so the cutoff day was yesterday (not that it would matter if the hacker go back on the word and demand more money after they got payed already).

 

[chrisrlink]

it sold for 7 mil on black ebay who wants to guess the fbi was the buyer?

 

[BigOnYa]

it sold for 7 mil on black ebay who wants to guess the fbi was the buyer?

Will you please link where you read this....

 

[Paulsar99]

Man cdpr really can't catch a break.

 

[BigOnYa]

https://www.engadget.com/cd-projekt...urce-code-hack-ransomware-sold-202610194.html

https://www.ign.com/articles/stolen-cd-projekt-red-files-reportedly-sold-on-dark-web-auction

 

[linuxares]

What is the potential use of Cyberpunk source code?

None, because people would get sued to the end of days if used.

 

[chrisrlink]

Will you please link where you read this....

https://www.videogameschronicle.com...data-reportedly-sold-after-7-million-auction/

 

[BigOnYa]

By the wording of this, they def seem from another country not of english, imo

 

[chrisrlink]

as i pointed on fb out the src is probably gone after the hackers took it, it will cause delay in patches

--------------------- MERGED ---------------------------

as i pointed on fb out the src is probably gone after the hackers took it, it will cause delay in patches

so basicly the "auction" was fake (probably to throw off the FBI or interpol)

 

[BigOnYa]

as i pointed on fb out the src is probably gone after the hackers took it, it will cause delay in patches

--------------------- MERGED ---------------------------


so basicly the "auction" was fake (probably to throw off the FBI or interpol)

I wonder if they actually ran the code, or tried to play any of the games first

 

[chrisrlink]

None, because people would get sued to the end of days if used.

after all cdpr released legal modding tools (at least on pc) so more QoL patches could be made and distributed

 

[linuxares]

after all cdpr released legal modding tools (at least on pc) so more QoL patches could be made and distributed

Yes, but that isn't the same as using the full source code from CDPR's game

 

[BigOnYa]

What I find more interesting than the game source codes being released, was the fact they were talking of releasing dirty laundry, like "interesting things on their accounts" and "violation of license agreements", and could that have possibly drove an investor or a big-wig from the company to secretly buy it, to save their own asses.

 

[Viri]

What is the potential use of Cyberpunk source code?

China

--------------------- MERGED ---------------------------

None, because people would get sued to the end of days if used.

Not in China

 

[DarkKaine]

China

--------------------- MERGED ---------------------------


Not in China

Exactly my thoughts lol.
Soon we'll have a Chinese Witcher 3 clone with 120 blinking UI buttons on the screen that all take you to the microtransactions page.

 

[RatherSimple]

The thing is, there's zero innovative stuff on RedEngine. It's buggy, sluggish and a bit outdated. Heck, it's flexible ofc but still unity is much more easier to learn. If you try to work with redengine, you have to go mostly trial and error to get stuff working as there's zero documentation out there. So using other publicly available engines are going to be way more easier than using redengine.

The only thing that is easy to flip is the game assets - which can be easily noticed and would end up with an easy court case.

If it was an Unreal Engine source code or something I would have understood the 7mils but for redengine? Idk... Unreal engine can also pull those stuff pretty easily. Majority of the stuff on their engine relies on scripted scenes and actions.

Either way, selling a stolen shit is not good. Even though cyberpunk is a buggy mess, trying to ransom on top of it is no different than trying to kick a crippled person that fell down from a wheelchair.

ps.

View attachment 246207
By the wording of this, they def seem from another country not of english, imo

the auction is on a russian forum. And my guess they're from russia / ukraine. There's been a huge operation on several different hacking groups in Russia as they were trying to target (and planning to ransom) COVID related labs to random. Russian government was like 'ok that's too much' and did operations on those ppl. There are some speculations these guys are also tied with those groups and might have used the same methods.

 

[Estriole]

the only way for the developer to make the hacker not gaining that money is by releasing the source code by themselves for free...
so the code stolen lost it's value and cannot be sold anymore...

 

[SaberLilly]

I don't like that CDPR ended up getting hacked over what i assume was the fantastibad launch of cyberpunk 2077, but i do commend them for not giving into the demands of the "epic pwners" although it cost them the source code for multiple projects, hopefully they were able to restore their servers because noone deserves to have to deal with the aftermath of a ransomware attack.

 

[eriol33]

I hope no one will buy it so they will have no choice but to release it for free