British Zynga hacker jailed for two years
A 29-year-old man is jailed after he hacks Zynga systems to steal virtual chips and sell them on for personal profit.
The man who hacked Zynga, stealing the identities of two of the game developer's employees, has been jailed for two years.
Ashley Mitchell stole around 400 billion credits from the US firm and sold them on Facebook the same site the games were played on.
The 29-year-old from Devon used fake Facebook accounts and a front company to sell the credits for less than their face value in order to fund his gambling addiction, Exeter Crown Court heard.
The chips were believed to be worth over 7 million.
James Taghdissian, prosecuting, told Exeter crown court the figure was based on a Zynga estimate of what "they would have lost if all the chips were successfully sold on," the Guardian reported.
"It was clear there had been a systematic approach adopted in probing and accessing Zynga," Taghdissian said.
"He made determined and repeated efforts to attack Zynga's systems."
Judge Philip Wassall said Mitchell had used "a considerable degreee of expertise and persistence" to compromise Zynga's systems.
He said "people rely on the security of systems" and anyone who came before the courts who bypassed security controls for their own profit "can expect custody."
Zynga is the company behind a range of popular titles on Facebook, including FarmVille and Mafia Wars.
The case highlighted two forms of threat businesses faced: targeted attacks and social engineering scams.
The two were combined by hackers in recent attacks exploiting a vulnerability affecting Adobe Flash Player, Reader and Acrobat.
A small number of targeted organisations were sent emails containing a Microsoft Excel document with a corrupted Flash file embedded inside.
What you need to know about migrating to SAP S/4HANA
Factors to assess how and when to begin migrationDownload now
Your enterprise cloud solutions guide
Infrastructure designed to meet your company's IT needs for next-generation cloud applicationsDownload now
Testing for compliance just became easier
How you can use technology to ensure compliance in your organisationDownload now
Best practices for implementing security awareness training
How to develop a security awareness programme that will actually change behaviourDownload now