Epic Games, developer company of Fortnite game, silently removed a vulnerability from its infrastructure, allowing hackers to access users' accounts with incredible ease.
"In early November we reported the vulnerability, and by the end of November it had been patched," said Oded Vanunu, one of its researchers. check point on ZDNet.
Vulnerability was in fact a combination of many errors in different parts of the company's infrastructure and some were not related to Fortnite.
Watch the video:
For a successful attack to take place users would have to click on a malicious link connecting to Epic Games. Of course, the vulnerability shocked the children, which as users with less experience could not detect the dangerous parameters contained in the link.
“It wasn't an advanced attack at all, and it was very simple to execute on backgroundVanunu said. "Login Token theft is one of the most emerging attack methods."
Of course Fortnite accounts are all at stake. As of June 2018, it has been reported that over nine millions The game's accounts have been compromised by hackers.
Why this game? Originally because it's popular.
On the other hand, Fortnite's V-Bucks are known to be used to launder (real) money from cybercriminals. And it's not just cyber criminals chasing the V-Bucks. Teens go into the process of hacking bills by stealing one another.
In many cases, hackers do not mind Fortnite's accounts, as they only want players' money.
- NSA: free GHIDRA reverse engineering tool
- What is Software, Hardware and Motherboard RAID? Guide for Beginners