Industry News
MMO game Street Mobster leaking data of 1.9 million users due to critical vulnerability
Attackers could exploit the SQL Injection flaw to compromise the game’s database and steal user data.
The CyberNews.com Investigation team discovered a critical vulnerability in Street Mobster, a browser-based massively multiplayer online game created by Bulgarian development company BigMage Studios.
Street Mobster is a free to play, browser-based online game in the mafia empire genre where players manage a fictional criminal enterprise. The game boasts a 1.9+ million player base and stores a user record database that can be accessed by threat actors by committing an SQL Injection (SQLi) attack on the game’s website.
Other games created by BigMage Studios are also potentially vulnerable to the same type of attack, which means that there is a possibility that even more users might be at risk.
The records that can be compromised by exploiting the SQLi vulnerability in Street Mobster potentially include the players’ usernames, email addresses, and passwords, as well as other game-related data that is stored on the database.
Fortunately, after we reported the vulnerability to BigMage Studios, CERT Bulgaria, and the Bulgarian data protection authority, the issue has been fixed by the developers and the user database is no longer accessible to potential attackers.
What is SQL Injection?
First found back in 1998, SQLi is deemed by the Open Web Application Security Project (OWASP) as the number one web application security risk.
Even though this vulnerability is relatively easy to fix, researchers found that 8% of websites and web applications are still vulnerable to SQLi attacks in 2020. Which, from a security perspective, is inexcusable. So much so, in fact, that UK internet service provider TalkTalk was hit with a record £400,000 fine over succumbing to a cyberattack that involved SQLi.
The vulnerability works by injecting an unexpected payload (a piece of code) into the input box on the website or in its URL address. Instead of reading the text as part of the URL, the website’s server reads the attacker’s payload as code and then proceeds to execute the attacker’s command or output data that would otherwise be inaccessible to unauthorized parties. Attackers can exploit SQLi even further by uploading pieces of code or even malware to the vulnerable server.
The fact that Street Mobster is susceptible to SQLi attacks clearly shows the disappointing and dangerous neglect of basic security practices on the part of the developers at BigMage Studios.
How we found this vulnerability
Our security team identified an SQL Injection vulnerability on the Street Mobster website and were able to confirm the vulnerability by performing a simple command injection test on the website URL. The CyberNews team did not extract any data from the vulnerable Street Mobster database.
What’s the impact of the vulnerability?
The data in the vulnerable Street Mobster database can be used in a variety of ways against the players whose information was exposed:
By injecting malicious payloads on Street Mobster’s server, attackers can potentially gain access to said server, where they can install malware on the game’s website and cause harm to the visitors – from using the players’ devices to mine cryptocurrency to redirecting them to other malicious websites, installing malware, and more.
The 1.9 million user credentials stored on the database can net the attackers user email addresses and passwords, which they can potentially use for credential stuffing attacks to hack the players’ accounts on other gaming platforms like Steam or other online services.
Because Street Mobster is a free-to-play game that incorporates microtransactions, bad actors could also make a lot of money from selling hacked player accounts on gray market websites.
What to do if you’ve been affected?
If you have a Street Mobster account, make sure to change your password immediately and make it as complex as possible. If you’ve been using your Street Mobster password on any other websites or services, change that password as well. This will prevent potential attackers from accessing your accounts on these websites in case they try to reuse your password for credential stuffing attacks.
However, it’s ultimately up to BigMage Studios to completely secure your Street Mobster account against attacks like SQLi.
Disclosure and lack of communication from BigMage Studios
Following our vulnerability disclosure guidelines, we notified the BigMage Studios about the leak on August 31, 2020. However, we received no reply. Our follow-up emails were left unanswered as well.
We then reached out to CERT Bulgaria on September 11 in order to help secure the website. CERT contacted the BigMage Studios and informed the company about the misconfiguration.
Throughout the disclosure process, BigMage Studios stayed radio silent and refused to get in touch with CyberNews.com. Due to this reason, we also notified the Bulgarian data protection agency about the incident on October 9 in the hopes that the agency would be able to pressure the company into fixing the issue.
Eventually, however, BigMage Studios appear to have fixed the SLQi vulnerability on streetmobster.com, without informing either CyberNews.com or CERT Bulgaria about that fact.
Powered by WPeMatico
SOFTSWISS, a global provider of iGaming software solutions, has won two prestigious trophies at the EGR Marketing & Innovation Awards 2025. These recognitions come alongside two more accolades at Malta’s iGaming Excellence Awards 2025.
EGR Marketing & Innovation Awards
Hosted annually, the EGR Marketing & Innovation Awards honour the most innovative and effective campaigns and teams in online gaming. Recognising success across marketing, creative execution, customer engagement, and commercial results, the awards are regarded as one of the industry’s top accolades.
This year marks the third consecutive win for SOFTSWISS, following previous victories for its standout campaigns, Bringing the Heat in 2023 and Grab Success in 2024. The judges praised the SOFTSWISS marketing team with the Marketing Team of the Year Award for showing a clear passion for their brand and a creative use of new technologies and data analytics.
In addition to leading the team’s collective success, Valentina Bagniya, CMO at SOFTSWISS, was personally recognised as the best B2B Marketer of the Year for her role in transforming SOFTSWISS’ marketing function into a brand powerhouse.
“Thank you to the EGR jury team for this wonderful recognition. Winning Marketing Team of the Year is an extraordinary achievement that highlights our strength and dedication as a team. Additionally, receiving B2B Marketer of the Year is a deeply meaningful acknowledgement of our collective efforts,” says Valentina Bagniya. “These awards are not about individual achievements; they reflect the creativity, commitment, and passion of our entire marketing team.”
Malta’s iGaming Excellence Awards
SOFTSWISS also received major recognition at Malta’s Gaming Excellence Awards 2025. Ivan Montik, Founder of SOFTSWISS, was honoured with the Lifetime Achievement Award for exceptional contributions to the iGaming industry over the course of his career. Meanwhile, Rubens Barrichello, ex-Formula 1 pilot and Non-Executive Director in Latin America at SOFTSWISS, was named Best iGaming Influencer of the Year, celebrating his significant impact through content creation, marketing, and online presence.
Valentina Bagniya comments: “It’s significant that our colleagues Ivan Montik and Rubens Barrichello received recognition at Malta’s Gaming Excellence Awards 2025, demonstrating how our leadership vision is increasingly recognised and valued by industry professionals. Moving forward, we remain dedicated to expanding our expertise and actively contributing to the advancement of our industry.”
On 3-4 July, the SOFTSWISS team will be attending iGB Live in London, ready to share their insights and expertise with interested attendees.
About SOFTSWISS
SOFTSWISS is an international technology company with over 15 years of experience developing innovative solutions for the iGaming industry. SOFTSWISS holds a number of gaming licences and provides comprehensive software for managing iGaming projects. The company’s product portfolio includes the Online Casino Platform, the Game Aggregator with over 30,000 casino games, the Affilka Affiliate Platform, the Sportsbook Software and the Jackpot Aggregator. In 2013, SOFTSWISS revolutionised the industry by introducing the world’s first Bitcoin-optimised online casino solution. The expert team counts over 2,000 employees.
The post SOFTSWISS Takes Home Four Awards In One Night appeared first on European Gaming Industry News.
Welcome to our weekly roundup of American gambling news again! Here, we are going through the weekly highlights of the American gambling industry which include the latest news and new partnerships. Read on and get updated.
Latest News
BMM Innovation Group, a technology conglomerate focused on gaming product compliance testing, cybersecurity solutions and virtual training for the global gaming industry, announced that it is exhibiting at the Perú Gaming Show 2025, June 18–19 at the Centro de Exposiciones Jockey in Lima, Perú. BMM’s local experts will be available at Booth No. 31–32 to discuss the Company’s full suite of testing, certification, cybersecurity and virtual training services for Perú’s growing gaming industry. With a well-established land-based sector and a rapidly expanding online gaming market, Perú represents one of the most dynamic jurisdictions in Latin America. BMM has supported the Peruvian gaming industry for more than 18 years, with a dedicated office in Lima since 2007. The Company’s deep roots and compliance expertise make it uniquely positioned to serve the diverse needs of Perú’s casinos, sports betting operators, lottery providers and online gaming programmes.
Amusnet is set to make a powerful impression at the Peru Gaming Show 2025, taking place on June 18-19 in Lima, by presenting a comprehensive portfolio across its Online Casino, Live Casino, and Land-based verticals. As one of the most prominent and influential gaming exhibitions in Latin America, PGS brings together the industry’s leading providers, manufacturers and decision-makers for two days of impactful business exchange. Amusnet is also sponsoring the LMG Futbol Experience on June 17, held just before the exhibition, showcasing involvement in local events and its engagement in supporting industry-wide collaboration.
International Game Technology PLC announced that its spectacular RISE55 cabinet is now live on casino floors across the US. With robust, performance-focused content roadmaps for the premium-leased and for-sale game segments, IGT’s RISE55 cabinet debuted with the highly entertaining Magic Treasures Gold game. The RISE55 cabinet features a 55-inch ultra-HD curved display that delivers crisp graphics, enhanced audio technology and remarkable player comfort. The RISE55 cabinet first hit casino floors in late May, with additional deployments planned through the summer. As the hardware’s Class III premium launch title, Magic Treasures Gold is a visually stunning multi-level progressive game with features that build upon the success of IGT’s award-winning Magic Treasures game, including a leveled-up version of the Money Ball feature.
Partnerships
Hard Rock Cafe, in partnership with international soccer icon Lionel Messi, launched new merchandise coinciding with one of the year’s most anticipated global soccer tournaments. The collection debuts as part of Hard Rock’s “WE PLAY TOGETHER” campaign, which unites soccer fans to celebrate the sport. The campaign will feature special experiences and exclusive offers, such as bundle deals combining themed Messi menu and retail items, for guests to watch each match and show support for their favourite teams. Lionel Messi announced the collection via an Instagram post, where he donned one of the custom tees now available for purchase.
PrizePicks, the largest daily fantasy sports operator in North America, announced that it has partnered with the Los Angeles Dodgers as the team’s Official DFS Partner. The partnership features several digital and in-stadium activations at Dodger Stadium as PrizePicks continues to strengthen its brand presence in baseball.
The post Gaming Americas Weekly Roundup – June 9-15 appeared first on European Gaming Industry News.
There are affiliate networks, and then there’s MegaList – a performance-first, hype-last kind of operation built for casino and sportsbook brands that prefer results over buzzwords.
In an industry that sometimes feels like it’s powered by vague metrics and recycled content, MegaList steps in as the “Mega Map” – a practical, data-driven network guiding both players and operators to higher ground. Less “look at our reach,” more “here’s your conversion rate.”
So no, this isn’t just another logo-stamped brand promising traffic and delivering bounce rates. This is a carefully engineered affiliate engine built on smart SEO, qualified leads, and just enough caffeine-fueled obsession with results to make even the most skeptical operators pay attention.
The iGaming Affiliate World: Why It (Still) Matters
Let’s be honest – the affiliate space in iGaming has had its fair share of bad actors and empty promises. But when done right, affiliate marketing is still one of the most effective and efficient ways to connect licensed operators with the right players.
Players want fewer popups, more clarity. Operators want actual ROI, not vague impressions.
Enter: the data-driven affiliate network.
It’s simple:
- Informed players make better choices.
- Strategic affiliates deliver better traffic.
- Everyone wins. Except, of course, the shady operators who preferred it the other way.
Meet the MegaList Brands
These aren’t vanity microsites. Each MegaList brand has a specific mission, actual humans behind the content, and a reputation for, well… telling it like it is.
MegaCasinoList
Let’s face it – players don’t need another affiliate promising “top 10 casinos” based on whatever ad paid the most. They need honest, transparent, expert-backed reviews.
That’s where MegaCasinoList comes in – a platform that filters out the noise and delivers legit info on licensed casinos, security, fairness, and gameplay. Slots? Live dealer games? Payout speed? Yep, it’s all in there, and it’s all vetted.
They work with reliable operators only, because – and here’s a crazy idea – not every shiny site deserves your deposit.
MegaTipsList
If you like sports predictions that read like a 20-page legal document, you’re in the wrong place.
MegaTipsList is built for bettors who want real insights, fast reads, accurate tips, and actual value. It delivers predictions, sports news, and timely promotions – minus the fluff and with none of that “win guaranteed” nonsense.
Designed for bettors who like to stay informed without needing a PhD to understand the odds.
MegaBetList
For the practical bettor who just wants the facts: which sites are legit, which ones pay fast, and what to expect before placing your first wager.
MegaBetList reviews betting platforms with a clear, no-nonsense voice. It’s not trying to dazzle; it’s trying to help people bet smarter – and it’s doing a pretty solid job of it.
From licensing to promotions to usability, everything is covered – and everything is filtered through what actually matters to sports fans.
Why This All Matters (And Why It’s Working)
The iGaming world doesn’t need more noise. It needs better filters, smarter partners, and affiliates that actually care whether the traffic leads somewhere useful.
That’s where MegaList comes in – not to impress with buzzwords, but to perform, to scale, and to make sure both operators and players are on the same page for once.
And if we may drop in a little vision while we’re at it:
“At MegaList, we believe informed players and strategic operators shape a stronger, smarter iGaming industry.”
For once, a statement that isn’t just inspirational filler.
So the next time someone pitches you an affiliate network, ask one thing: “Do they have a plan, or just a landing page?”
MegaList has both, and a track record to prove it.
Explore MegaList’s network:
🔗 MegaAffiliatesList.com
The post Meet MegaList: The Rising Force in iGaming Affiliation appeared first on European Gaming Industry News.
-
Latest News7 days agoThe Most Popular Gaming Platforms in Germany: Console and Smartphone Attract Ever More Video Game Players
-
Balkans7 days ago
SYNOT Partners with Efbet in Bulgaria
-
Australia6 days ago
VGCCC: Minors Exposed to Gambling at ALH Venues
-
Asia7 days ago
FIFA, NBA, UFC and More Sports Events Go Live – Crypto Sportsbook BETY Offers Global Sports Betting Coverage 2025
-
EveryMatrix Press Releases6 days ago
SlotMatrix unleashes divine riches in Fortuna Gold where gods rule the reels
-
Brazil7 days ago
TG Lab unveils new Brazil office to further cement position as market’s most localised platform
-
Africa6 days ago
pawaTech strengthens its integrity commitment with membership of the International Betting Integrity Association
-
Baltics6 days ago
Estonian start-up vows to revolutionise iGaming customer support with AI
