Kick targeted in alleged data breach by mogilevich

• Ransomware group: mogilevich
• Country: Australia
• Sector: Technology
• Announcement date: March 1, 2024

A data leak claim regarding the Kick platform

The threat actor known as mogilevich has published a post claiming to have breached the systems of the Kick platform. This announcement, which surfaced on a ransomware leak site, marks a significant development in the ongoing landscape of cyber extortion. The group has officially claimed responsibility for the incident, asserting that they have successfully compromised the infrastructure of the Australian-based streaming service.

In the evolving landscape of modern cyber warfare, ransomware groups often employ a tactic known as double extortion. In these scenarios, attackers do not merely encrypt an organization's data to disrupt operations; they also exfiltrate sensitive information to use as leverage. By threatening to leak stolen data on public forums or dedicated leak sites, these groups aim to pressure organizations into paying ransoms to prevent the exposure of private information to the public or regulatory bodies.

Details of the alleged attack

According to the post published by mogilevich, the group claims to have exfiltrated a substantial amount of data, totaling 75 GB. The announcement states that this data is currently being offered for sale. Furthermore, the group has set a deadline for their demands, stating that the data will be subject to the terms of their post until October 3, 2024.

While the group has made these significant claims, it is important to note that no screenshot has been provided to substantiate the breach at this time. The authenticity of the leak remains uncertain until an independent verification is conducted, and the institution's data protection capacity and the validity of the claim remain unconfirmed.

Alleged compromised data types

The post specifies several categories of information that have supposedly been compromised during the breach. The data allegedly stolen includes:

• User data
• Streamer data
• Affiliate program data
• System logs

About Kick

Kick is a video streaming platform focused on live content. It provides a broadcasting service where users and content creators interact.

Risk assessment and organizational implications

This incident may pose secondary risks such as identity theft or targeted phishing attacks for platform users and streamers. The nature of the alleged data could increase risks to the platform's operational security and user privacy. Because the platform is based in Australia, a potential data breach could trigger processes under local privacy laws and regulatory bodies.

For organizations operating within the technology and streaming sectors, such threats highlight the critical importance of robust defensive measures. Common defensive steps that organizations can take to mitigate these risks include implementing multi-factor authentication (MFA) across all administrative and user accounts, maintaining rigorous patch management schedules to close vulnerabilities, and conducting regular security awareness training to prevent successful phishing attempts. Additionally, maintaining comprehensive, encrypted, and off-site backups is a fundamental component of a resilient cybersecurity posture, ensuring that an organization can recover from a disruption without necessarily succumbing to extortion demands.

As the situation develops, the limited information available regarding the mogilevich group makes it difficult to determine the full scope of their operational methods. Until the claims are verified or the organization provides a formal response, the incident remains an unconfirmed allegation of a significant data breach.