Feeds

Attacker grabs gaming tag of Xbox Live policy director

'Predator' reveals own IM list, Facebook account, on YouTube boastvid

Securing Web Applications Made Simple and Scalable

NSFW link Microsoft's director of policy and enforcement for Xbox LIVE has had his Xbox account hijacked by a disgruntled gamer using a social engineering attack on his domain name registrar, Network Solutions.

Stephen Toulouse, who goes by the screen name “Stepto” and owns the domain stepto.com, also lost his email and web hosting accounts.

He tweeted yesterday: "Sigh. please be warned. Network solutions has apparently transferred control of Stepto.com to an attacker and will not let me recover it."

Somebody claiming to be the attacker has uploaded a video to YouTube showing him clicking around Toulouse's Xbox account, while breathlessly describing how he "socialed his hosting company".

The domain and account have since been returned to Toulouse's control.

Toulouse was head of communications for the Microsoft Security Response Center for many years, handling PR during worm outbreaks such as Blaster and Sasser.

Now at Xbox LIVE, Toulouse is, as the attacker put it: "the guy who's supposed to be keeping us safe". He's responsible for enforcing the policies that ban persistent cheats.

Social engineering attacks against domain name registrars exploit human, rather than technological, vulnerabilities. Attackers call up tech support and try to convince them that they are their target.

In this case, hijacking Toulouse's domain name seems to have been a means to control his email account, enabling the attacker to reset Toulouse's Xbox LIVE password and take over his "gamer tag".

The same technique was used to compromise the Chinese portal Baidu.com, that time via Register.com, in late 2009. That resulted in a lawsuit, which was settled for an undisclosed sum last year.

The attacker, calling himself Predator, was apparently annoyed that Toulouse had "console banned" him over 35 times. He said he'd compromised accounts in the past, and offered to do so again for $250.

He seems to have left a fair bit of evidence in his wake. The video shows his instant messaging contact lists and some Facebook information. Commenters have already posted his purported home address.

The video, which shows the immediate aftermath of the attack, can be viewed here. It may not be entirely safe for work, due to some racist language. ®

This story was first published at Domain Incite.

Mobile application security vulnerability report

More from The Register

next story
LibreSSL RNG bug fix: What's all the forking fuss about, ask devs
Blow to bit-spitter 'tis but a flesh wound, claim team
Manic malware Mayhem spreads through Linux, FreeBSD web servers
And how Google could cripple infection rate in a second
NUDE SNAPS AGENCY: NSA bods love 'showing off your saucy selfies'
Swapping other people's sexts is a fringe benefit, says Snowden
Own a Cisco modem or wireless gateway? It might be owned by someone else, too
Remote code exec in HTTP server hands kit to bad guys
British data cops: We need greater powers and more money
You want data butt kicking, we need bigger boots - ICO
Crooks fling banking Trojan at Japanese smut site fans
Wait - they're doing online banking with an unpatched Windows PC?
NIST told to grow a pair and kick NSA to the curb
Lrn2crypto, oversight panel tells US govt's algorithm bods
prev story

Whitepapers

Reducing security risks from open source software
Follow a few strategies and your organization can gain the full benefits of open source and the cloud without compromising the security of your applications.
Consolidation: The Foundation for IT Business Transformation
In this whitepaper learn how effective consolidation of IT and business resources can enable multiple, meaningful business benefits.
Application security programs and practises
Follow a few strategies and your organization can gain the full benefits of open source and the cloud without compromising the security of your applications.
Boost IT visibility and business value
How building a great service catalog relieves pressure points and demonstrates the value of IT service management.
Consolidation: the foundation for IT and business transformation
In this whitepaper learn how effective consolidation of IT and business resources can enable multiple, meaningful business benefits.