Latest News

MMO game Street Mobster leaking data of 1.9 million users due to critical vulnerability

Published

6 years ago

October 22, 2020

George Miller

Reading Time: 3 minutes

Attackers could exploit the SQL Injection flaw to compromise the game’s database and steal user data.

The CyberNews.com Investigation team discovered a critical vulnerability in Street Mobster, a browser-based massively multiplayer online game created by Bulgarian development company BigMage Studios.

Street Mobster is a free to play, browser-based online game in the mafia empire genre where players manage a fictional criminal enterprise. The game boasts a 1.9+ million player base and stores a user record database that can be accessed by threat actors by committing an SQL Injection (SQLi) attack on the game’s website.

Other games created by BigMage Studios are also potentially vulnerable to the same type of attack, which means that there is a possibility that even more users might be at risk.

The records that can be compromised by exploiting the SQLi vulnerability in Street Mobster potentially include the players’ usernames, email addresses, and passwords, as well as other game-related data that is stored on the database.

Fortunately, after we reported the vulnerability to BigMage Studios, CERT Bulgaria, and the Bulgarian data protection authority, the issue has been fixed by the developers and the user database is no longer accessible to potential attackers.

What is SQL Injection?

First found back in 1998, SQLi is deemed by the Open Web Application Security Project (OWASP) as the number one web application security risk.

Even though this vulnerability is relatively easy to fix, researchers found that 8% of websites and web applications are still vulnerable to SQLi attacks in 2020. Which, from a security perspective, is inexcusable. So much so, in fact, that UK internet service provider TalkTalk was hit with a record £400,000 fine over succumbing to a cyberattack that involved SQLi.

The vulnerability works by injecting an unexpected payload (a piece of code) into the input box on the website or in its URL address. Instead of reading the text as part of the URL, the website’s server reads the attacker’s payload as code and then proceeds to execute the attacker’s command or output data that would otherwise be inaccessible to unauthorized parties. Attackers can exploit SQLi even further by uploading pieces of code or even malware to the vulnerable server.

The fact that Street Mobster is susceptible to SQLi attacks clearly shows the disappointing and dangerous neglect of basic security practices on the part of the developers at BigMage Studios.

How we found this vulnerability

Our security team identified an SQL Injection vulnerability on the Street Mobster website and were able to confirm the vulnerability by performing a simple command injection test on the website URL. The CyberNews team did not extract any data from the vulnerable Street Mobster database.

What’s the impact of the vulnerability?

The data in the vulnerable Street Mobster database can be used in a variety of ways against the players whose information was exposed:

By injecting malicious payloads on Street Mobster’s server, attackers can potentially gain access to said server, where they can install malware on the game’s website and cause harm to the visitors – from using the players’ devices to mine cryptocurrency to redirecting them to other malicious websites, installing malware, and more.

The 1.9 million user credentials stored on the database can net the attackers user email addresses and passwords, which they can potentially use for credential stuffing attacks to hack the players’ accounts on other gaming platforms like Steam or other online services.

Because Street Mobster is a free-to-play game that incorporates microtransactions, bad actors could also make a lot of money from selling hacked player accounts on gray market websites.

What to do if you’ve been affected?

If you have a Street Mobster account, make sure to change your password immediately and make it as complex as possible. If you’ve been using your Street Mobster password on any other websites or services, change that password as well. This will prevent potential attackers from accessing your accounts on these websites in case they try to reuse your password for credential stuffing attacks.

However, it’s ultimately up to BigMage Studios to completely secure your Street Mobster account against attacks like SQLi.

Disclosure and lack of communication from BigMage Studios

Following our vulnerability disclosure guidelines, we notified the BigMage Studios about the leak on August 31, 2020. However, we received no reply. Our follow-up emails were left unanswered as well.

We then reached out to CERT Bulgaria on September 11 in order to help secure the website. CERT contacted the BigMage Studios and informed the company about the misconfiguration.

Throughout the disclosure process, BigMage Studios stayed radio silent and refused to get in touch with CyberNews.com. Due to this reason, we also notified the Bulgarian data protection agency about the incident on October 9 in the hopes that the agency would be able to pressure the company into fixing the issue.

Eventually, however, BigMage Studios appear to have fixed the SLQi vulnerability on streetmobster.com, without informing either CyberNews.com or CERT Bulgaria about that fact.

Source

Blueprint Gaming

Weekend Reels | Week 30: Slot Drops & Trends

Published

3 days ago

July 24, 2026

Wladimir P.

weekend-reels-|-week-30:-slot-drops-&-trends

Here are this weeks latest slots releases compiled by Eastern European Gaming

Spinomenal has released 3 Fuego Chillies, a new 5×3 video slot themed around a Mexican street fiesta. The game ships with a feature-led Bonus Game and a top prize billed as a Grand Jackpot of x3,000 the total bet.

CT Interactive has released its latest slot game, 40 Mega Star. As the night sky comes alive with countless shimmering lights, only a select few stars have the power to capture attention and become true Mega Stars.

TaDa Gaming has expanded its popular Unlimited Fortune mechanic with the launch of Joker Coins Unlimited Fortune. Combining Lock & Respin, progressive bonus expansion, jackpots, multipliers and the signature Unlimited Fortune feature, this compact three-reel release delivers layered gameplay and win potential of up to 5000x.

Blueprint Gaming is releasing an upgraded version of Super Graphics Upside Down exclusively on Lottomart, giving Lottomart’s UK players early access to the title. Originally launched in 2021, Super Graphics Upside Down is being re-released with a new bonus wheel feature and an increased max win potential, rising from 250X to 3000X, according to the companies.

ICONIC21 has released Wild Gold Mine 2, a high-volatility sequel to its Wild Gold Mine slot. The game is played across 243 ways and launches with multiple RTP configurations, with a stated top prize of 10,000x.

Games Global has launched Rumble Kong CASHINGO, a new jungle-themed online slot developed with exclusive studio partner Alchemy Gaming. The title went live on 23rd July 2026. Rumble Kong CASHINGO is a 5×5, 3,125 ways-to-win game built around an expanding CASHINGO collection grid.

Swintt has released a new slot from its Elysium Studios label, titled Odyssey Hold & Win. The supplier said the game is built around a Hold & Win collection mechanic and features a stated maximum win of 3,317x. Odyssey Hold & Win runs on a 4×4 grid that can expand to 4×8 when Athena appears, according to the company.

ELA Games has released a new slot, Age of Cleopatra, adding another ancient-Egypt theme title to its portfolio. The studio positions the game as a medium-volatility release and says it is available to demo now. Age of Cleopatra runs on a 5×3 reel set-up with 25 paylines.

Endorphina has launched Zalatar, a new myths-and-legends themed online slot, expanding its recent run of fantasy-leaning releases. The supplier said Zalatar is a 5-reel, 3-row game with 25 fixed paylines, 96.03% RTP and high volatility.

The post Weekend Reels | Week 30: Slot Drops & Trends appeared first on EE Gaming | Global iGaming & Tech Intelligence Hub.

Awards

Slotsoo Awards 2026 Celebrate the Best Casinos and Game Providers

Published

3 days ago

July 24, 2026

Wladimir P.

slotsoo-awards-2026-celebrate-the-best-casinos-and-game-providers

Slotsoo is proud to announce the winners of the Slotsoo Awards 2026, recognising the online casinos and game providers that have delivered the best player experiences over the past year. Now firmly established as an annual celebration of excellence, the awards continue to recognise the companies setting new standards for quality and innovation across the iGaming industry.

Spotlighting the Best Game Providers of 2026

Following last year’s successful debut, the Slotsoo Game Provider Awards returned for a second year to recognise the studios pushing online slots forward through original ideas, engaging gameplay, and consistently high-quality releases. This year’s winners are:

The Machine MVP – Pragmatic Play
Bonus Buyer – Eurasian Gaming
Volatility Virtuoso – 1spin4win
Jackpot Jumbo – Platipus Gaming
Symphony Spinner – Peter & Sons
Reel Renegade – TaDa Gaming
Promising Prodigy – EXCO Game Studio

Pragmatic Play retained the prestigious Machine MVP award for a second consecutive year, while every other category crowned a new winner, highlighting the emergence of fresh talent and new ideas among game providers.

Casino Awards Return for a Fourth Year

Since their debut in 2023, the Slotsoo Casino Awards have celebrated the operators raising the standard for online casino experiences. This year’s winners continue that tradition, earning recognition for excellence across bonuses, withdrawals, gamification, and overall quality. The seven winners for 2026 are:

The Gambling GOAT – Lunar Spins
The Bonus Buff – Go4Casino
The Loyalty Lord – Valhalla Wins
The Withdrawal Wizard – Taste Vegas
The Gamification Guru – Lucky Fuel
The Payout Professor – Stupid Casino
The Noisy Newcomer – Kudos Bet

While the Game Provider Awards saw several first-time winners, the Casino Awards reflected the continued strength of a few established operators. C24 Partners enjoyed a particularly successful year, with four awards going to brands from its portfolio, including the main trophy The Gambling GOAT.

Recognition That Goes Beyond Popularity

Unlike many industry awards, the Slotsoo Awards are not decided by public voting. Winners are selected by the Slotsoo team after evaluating casino operators and game providers throughout the year. Each nominee is assessed on factors such as player value and innovation.

This approach ensures that both established industry leaders and ambitious newcomers have an equal opportunity to be recognised. Whether it’s a casino redefining loyalty rewards or a game studio introducing fresh mechanics, the awards highlight companies that genuinely move the industry forward.

Other News from Slotsoo.com This Summer

The Slotsoo Awards weren’t the only milestone for the company this summer. In June, the team attended the HIPTHER Baltics & Nordics Gaming Conference in Tallinn, connecting with industry professionals, exploring the latest developments in iGaming, and returning home with plenty of inspiration.

July marked the publication of Slotsoo’s first book, The Casino Player’s ABC, written by Markus Björk, Head of Content. This tongue-in-cheek ABC book for adults takes a humorous look at the ups and downs in slot gaming. Markus Björk comments:

“The awards and the book may seem like very different projects, but they share the same goal. Both are about celebrating what makes this industry unique and helping players navigate it with a sense of humour.”

With another successful awards season, the publication of their first book, and an active presence at industry events, 2026 has been one of Slotsoo’s busiest and most exciting years to date.

The post Slotsoo Awards 2026 Celebrate the Best Casinos and Game Providers appeared first on EE Gaming | Global iGaming & Tech Intelligence Hub.

BETBY

BETBY Builds on a Strong Start to 2026 with Solid H1 Sportsbook Growth

Published

3 days ago

July 24, 2026

Wladimir P.

betby-builds-on-a-strong-start-to-2026-with-solid-h1-sportsbook-growth

BETBY, the Tier 1 sportsbook supplier, has continued its strong start to 2026, delivering solid year-on-year growth across its business during the first half of the year. Building on the positive Q1 results reported in April, the supplier’s performance was supported by continued market expansion, product innovation, and strong activity across its operator partnerships.

During the first half of 2026, BETBY’s sportsbook Gross Gaming Revenue (GGR) increased by 42.7% compared to H1 2025. The number of active players across the provider’s partner network grew by 47%, while the total number of bets placed rose by 21.2%, reflecting sustained growth across both new and existing operator partnerships.

The period also saw BETBY further expand its product ecosystem through several key launches and developments. Among them was BETBY Predictions, the industry’s first fixed-odds prediction markets feed, opening a new betting vertical for operators. The supplier also introduced Stories, an engagement feature built around a familiar, interactive content format and delivered directly within the sportsbook experience.

The FIFA World Cup provided an additional boost during the last three weeks of June, generating high levels of betting activity across BETBY’s partner network and demonstrating the scalability and reliability of its sportsbook during the world’s largest sporting event.

BETBY’s proprietary esports feed, Betby Games, also delivered continued growth during H1 2026, recording a 28% year-on-year increase in Gross Gaming Revenue. Active players grew by 46%, while the number of bets placed rose by 14.8%. These figures reinforce Betby Games’ importance within BETBY’s broader product portfolio.

Leonid Pertsovskiy, Chief Executive Officer at BETBY, said: “After a strong first quarter, we are pleased to see that the positive trend continued throughout the first half of the year. These results reflect the strength of our long-term strategy, combining continued market expansion with a clear focus on product innovation and helping our partners grow.

“The launch of products such as BETBY Predictions and features like Stories, alongside the continued evolution of Betby Games, demonstrate our commitment to delivering solutions and technology that create measurable value for operators. We are proud of what we have achieved so far this year and remain focused on continuing this progress throughout H2.”

The post BETBY Builds on a Strong Start to 2026 with Solid H1 Sportsbook Growth appeared first on EE Gaming | Global iGaming & Tech Intelligence Hub.