Twitch

On Twitch's website's game pages today appeared a close up of Jeff Bezos' face, in what appears to be a mysterious defacement attack.

It's been a rough week for Twitch, with threat actors claiming on Wednesday that they breached the company and leaked on 4chan a 125GB archive containing Twitch.tv source code, internal tools, and streamer revenue reports.

Twitch leak posted to 4chan
Twitch leak posted to 4chan

Twitch later confirmed the massive breach in a Tweet and said they were investigating the incident.

"We can confirm a breach has taken place. Our teams are working with urgency to understand the extent of this. We will update the community as soon as additional information is available. Thank you for bearing with us." - Twitch.

Twitch hacking troubles continue

As first reported by TheVerge, Twitch problems have continued today with people reporting on Twitter and Reddit that the website's game pages suddenly showed a close-up of Jeff Bezos as the background image.

Twitch.tv has pages devoted to individual games so that visitors can quickly watch streams related to a particular title. These game pages typically have backgrounds related to the game, as shown in the Minecraft page below.

Normal background image for the Twitch Dota 2 page
Normal background image for the Twitch Dota 2 page

However, today the game page backgrounds suddenly changed to a close-up of the same picture of Jeff Bezos used in the leaked post on 4chan.

Defaced background image for the Twitch Dota 2 page
Defaced background image for the Twitch Dota 2 page
Source: Archive.is

Twitch has since removed all background images from game pages to fix the defacement.

At this time, it is unclear if the threat actors continue to have access to Twitch's infrastructure or performed the defacement in some other manner.

One user on Reddit theorized that hackers could have used a poisoned cache on their CDN to deface the site.

"Keep in mind that this does not necessarily mean that the website was hacked. It could have been a case of cache poisioning as Twitch is heavily reliant on various caching mechanisms. While this is still considered hacking its different from someone having access to the admin of the website or any of the back end systems," a user posted to Reddit.

BleepingComputer has reached out to Twitch to learn more about what happened but has not received a response at this time.

Related Articles:

Reddit down in major outage blocking access to web, mobile apps

Critical flaw in LayerSlider WordPress plugin impacts 1 million sites

Evasive Sign1 malware campaign infects 39,000 WordPress sites