Gaming industry still in the scope of attackers in Asia

guest · Mar 11, 2019

Gaming industry still in the scope of attackers in Asia
March 11, 2019
https://www.welivesecurity.com/2019/03/11/gaming-industry-scope-attackers-asia/

This is not the first time the gaming industry has been targeted by attackers who compromise game developers, insert backdoors into a game’s build environment, and then have their malware distributed as legitimate software.
Yet again, new supply-chain attacks recently caught the attention of ESET Researchers. This time, two games and one gaming platform application were compromised to include a backdoor.
Three Cases, Same Backdoor
While two of the compromised products no longer include the backdoor, one of the affected developers is still distributing the trojanized version: ironically, the game is named Infestation, and is produced by Thai developer Electronics Extreme.
Conclusion
Supply-chain attacks are hard to detect from the consumer perspective. It is impossible to start analyzing every piece of software we run, especially with all the regular updates we are encouraged or required to install. So, we put our trust in software vendors that the files they distribute don’t include malware.
Click to expand...

Floyd 57 · Mar 11, 2019

Good thing infestation sucks, it's like some copy of PUBG. What were the other 2 games tho Useless article

guest · Mar 12, 2019

Chinese hacking group backdoors products from three Asian gaming companies
March 11, 2019
https://www.zdnet.com/article/chine...s-products-from-three-asian-gaming-companies/

A notorious Chinese cyber-espionage outfit known as the Winnti Group has breached the networks of two game makers and a gaming platform in Asia to include a backdoor trojan within their products.
Two of the compromised products no longer include the Chinese hackers' backdoor [...] The name of the third impacted product (a game) is still unknown.

"We have worked with one of the affected developers, and we respected their wish to stay anonymous and handle the situation on their end," Léveillé told ZDNet in an email. "To be fair, we decided to simply avoid mentioning the names of publishers that already remediated the issue."
The researcher also told ZDNet that the Winnti Group appears to have used the normal game updates as a means to push the backdoored versions to users, a reason why the infection wasn't spotted right away and contained, reaching a large number of users.

However, because Infestation game devs have failed to clean up their servers, the Winnti Group could deploy a new malicious game update with a new backdoor that communicates with a different C&C server and re-activate all previously infected users.
Click to expand...

Log in or Sign up

Gaming industry still in the scope of attackers in Asia

guest Guest

Floyd 57 Registered Member

guest Guest

Log in or Sign up

Gaming industry still in the scope of attackers in Asia

guest Guest

Floyd 57 Registered Member

guest Guest

Useful Searches