The Last of Us 2 leak was likely the result of hackers infiltrating a vulnerability in old Naughty Dog games, a new report has suggested. This follows Sony’s own comments that the individuals responsible for the leaks weren’t Naughty Dog employees or contractors.

The recent leaks saw reels of The Last of Us 2 footage being distributed online, spoiling major plot points in the game that were promptly circulated across the internet. Given the reports surrounding Naughty Dog’s alleged overworking of its staff, many theorized that the leak was perpetrated by an individual working for the studio.

However, Sony later released a statement clarifying that the company had “identified the primary individuals responsible for the unauthorized release of TLOU2 assets,” and that those individuals “are not affiliated with Naughty Dog or SIE.”

In a new Kotaku report, an individual going by the name Pixelbutts shared details of how a group of hackers accessed Naughty Dog’s Amazon servers. According to Pixelbutts, the group uncovered password information included in the code for old Naughty Dog games such as Uncharted 3 and The Last of Us. This vulnerability would theoretically allow the group to also fetch files belonging to Naughty Dog, including The Last of Us 2 content.

Every ND game has a "final" patch that is pushed to the game that contains an Amazon AWS key, that when paired with a secret bucket ID it will give full access to the server's contents.

Theres a different key and bucket ID per game, this is important

— PixelButts (@PixelButts) May 3, 2020

This vulnerability was discovered recently and some hackers took full advantage of it, saving TLOU1, UC3, and other dev stuff.

At the time, it was disclosed to me around early February, and was very early on so ~January 2020 it was discovered

— PixelButts (@PixelButts) May 3, 2020

However, Pixelbutts claims that the hacker group was likely not responsible for spreading the content it had found online. As the group is comprised of Naughty Dog enthusiasts, Pixelbutts believes their methods were discovered by other individuals who acted maliciously.

Sony has not responded to these claims, and according to Pixelbutts the vulnerability was closed by April 30th, meaning no further data has been obtained. However, they claim that 1TB of files were obtained by the hackers before the vulnerability was locked down.



Posted: May 07, 2020 11:09 am
Related Forum: PlayStation Forum

Source: https://www.gamerevolution.com/news/645220-the-last-of-us-2-leak-hackers