Cyber Threat Actor: Nathan Leroux

Nathan Leroux is an alias used by an individual associated with the hacking group known as Xbox Underground. He is identified as residing in Bowie, Maryland, United States. The group also comprised Sanadodeh Nesheiwat of Washington, New Jersey, David Pokora of Mississauga, Ontario, Canada, and Austin Alcala of McCordsville, Indiana, with an additional Australian suspect linked to the conspiracy. Their coordinated activity is described as occurring from January 2011 through March 2014. The indictment alleges that the members acted together to gain unauthorized access to multiple corporate and government networks.

The victims named in the reports include the technology companies Microsoft, Epic Games, Valve, and Zombie Studios. Additionally, the United States Army’s networks were specifically mentioned as compromised. The article notes that the attackers allegedly stole software and data related to Microsoft's Xbox One gaming console and Xbox Live online gaming system. Pre‑release game copies such as 'Call of Duty: Modern Warfare 3' and 'Gears of War 3' were among the taken assets. All identified targets and the defendants’ places of residence are located within the United States, indicating a domestic focus. Initial access was achieved through SQL injection attacks and the use of stolen employee usernames and passwords. No particular malware families or custom toolsets are described in the available sources. The operation resulted in the exfiltration of unreleased software, source code, pre‑release video game copies, and military training software such as Apache helicopter simulation tools. The Department of Justice asserted that the value of the stolen intellectual property lies between $100 million and $200 million. In April 2014 a federal grand jury charged the four U.S. members; David Pokora and Sanadodeh Nesheiwat pleaded guilty to conspiracy to commit computer fraud and copyright infringement, while an Australian associate also faced charges in connection with the conspiracy.