That 'Fortnite' cheating app is probably hiding malware

guest · Jul 3, 2018

That 'Fortnite' cheating app is probably hiding malware
If it sounds too good to be true, it probably is.
July 3, 2018
https://www.engadget.com/2018/07/02/fortnite-cheats-hide-malicious-adware/

Rainway has discovered malicious Windows adware hiding in a cheat that promised both an aimbot and free in-game V-Bucks. Install it and it immediately alters Windows to serve its own rogue ads, creating a man-in-the-middle attack (with Rainway as an unwitting participant) by loading its own root certificate and routing all internet traffic through a proxy.

The file host recorded 78,000 downloads, and Rainway received 381,000 reports. A significant number of Fortnite players took the bait, then.

This isn't the only malware using Fortnite as a ploy. We've seen numerous instances of attackers promising a download for the Android version (which isn't ready yet) to compromise the phones of over-eager players.
Click to expand...

guest · Oct 3, 2018

Fortnite Cheaters Tempted with Data-Stealing Malware
October 3, 2018
https://www.infosecurity-magazine.com/news/fortnite-cheaters-tempted-data/

The malware was hidden amidst a “sizable mish-mash” of free season six passes, ‘free’ Android versions of the game, ‘free V-Bucks’ used to buy additional content for the game, and “a lot of bogus cheats, wallhacks, and aimbots,” he said.

It’s hidden in YouTube clips masquerading as cheats. One managed to garner 120,000 views before it was pulled.

“Offering up a malicious file under the pretense of a cheat is as old school as it gets, but that’s never stopped cyber-criminals before,” Boyd added. “In this scenario, would-be cheaters suffer a taste of their own medicine via a daisy chain of click-throughs and (eventually) some malware as a parting gift.”

“Some of the most notable things it takes an interest in are browser session information, cookies, Bitcoin wallets, and also Steam sessions,” explained Boyd.
Reports have also emerged of stolen Fortnite and other account being sold on Instagram
Click to expand...

guest · Oct 29, 2018

Fortnite Scams Are Even Worse Than You Thought
October 29, 2018
https://www.wired.com/story/fortnite-scams-even-worse-than-you-thought/

The most popular video game in the world is Fortnite—which makes Fortnite scams a potentially very profitable endeavor.

But a new report from security firm ZeroFox lays bare just how broadly these scams have proliferated across social media, YouTube, and thousands of domains.
“Once we started digging into it, we uncovered a lot of stuff,” says Zack Allen, director of threat operations at ZeroFox.

By the numbers, that “stuff” comprises over 4,770 live domains dedicated to Fortnite scams; 1,390 YouTube videos advertising malicious links with combined views in the millions; and hundreds of links on social media every day that lead to fraudulent destinations.

The fraud generally centers around V-Bucks, the in-game currency "[...] they made it really hard for people to differentiate between what was legitimate and what was not.”
Click to expand...

ronjor · Jan 15, 2019

Fortnite is being used by criminals to launder cash through V-Bucks

By Charlie Osborne | January 15, 2019
Stolen credit cards are being used to buy in-game currency, leading to money laundering through the Dark Web.
Click to expand...

guest · Jan 16, 2019

Epic's Fortnite fail: Ancient UT2004 server used for login-stealing proof-of-concept
A tale of XSS, SQL injection and OAuth implementation
January 16, 2019
https://www.theregister.co.uk/2019/01/16/fortnite_security_vuln_token_theft/

Infosec biz Check Point discovered the XSS vuln, which, when combined with a login redirect attack, had the potential to let a mischief-maker gain access to user accounts without having to trick targets into handing over usernames and passwords.

Check Point’s proof-of-concept even used a completely genuine *.epicgames.com URL as a phishing vector.

Researchers discovered that dusty corners of Epic’s web infrastructure were vulnerable to a combination of the XSS vuln and a SQL injection attack, allowing them to compromise Epic’s social media account single sign-on implementation.
They did all of this by exploiting an old Unreal Tournament 2004 server.
Click to expand...

Check Point blog entry: Hacking Fortnite

guest · Aug 12, 2019

mood said: ↑

Epic's Fortnite fail: Ancient UT2004 server used for login-stealing proof-of-concept
Check Point blog entry: Hacking Fortnite
Click to expand...

Epic hit with class-action suit over hacked Fortnite accounts
The suit was brought on behalf of those affected by a security gap in Epic’s log-in system
August 9, 2019
https://www.polygon.com/2019/8/9/20799032/epic-games-fortnite-lawsuit-security-data

Epic Games is being sued over security breaches that allowed hackers to access the personal information of Epic Games accounts.

The class-action lawsuit, filed by Franklin D. Azar & Associates in U.S. District Court in North Carolina, alleges Epic’s “failure to maintain adequate security measures and notify users of the security breach in a timely manner.” The lawsuit states that “there are more than 100 class members.”

In January, Epic acknowledged that a bug in Fortnite may have exposed personal information for millions of user accounts. Check Point Researchers originally reported how the attacks were carried out
Epic Games acknowledged and fixed the issue, but the suit alleges that the company has failed to notify affected users.

“Epic Games has not yet directly informed or notified individual Fortnite users that their [personally identifiable information] may be compromised as a result of the breach,” the lawsuit says.
According to the filing, the plaintiff and anyone else affected by the breaches “have an ongoing interest in ensuring that their [personally identifiable information] is protected from past and future cybersecurity threats.”
Click to expand...

guest · Sep 12, 2020

Fortnite Accounts, Other Games Now Constitute a $1 Billion Black Market for Hackers
September 4, 2020
https://www.cpomagazine.com/cyber-s...stitute-a-1-billion-black-market-for-hackers/

Bursting onto the gaming scene in 2017, Fortnite quickly rose to become the world’s most-played online game. With tens of millions of active players per month and about $2.5 billion per year in revenue, the game is a small economy unto itself. It’s thus not surprising that a black market has developed for hacked Fortnite accounts; what is surprising is how much business it brings in.

A set of underground marketplaces that deal in stolen accounts from various games is estimated to do about $1 billion in annual business, with $700 million of that coming from just four games. In addition to Fortnite accounts, criminals do big business selling stolen assets from Minecraft, Roblox and Runescape.
How black market Fortnite accounts became big business
Digital forensics firm Night Lion Security recently published a report on this phenomenon, investigating various dark web and underground forums to uncover this very brisk trade in stolen Fortnite accounts.
Click to expand...

The black market sites that sell Fortnite accounts generally operate on an “auction” model somewhat similar to that of eBay. They sell stolen account credentials as well as individual items scavenged from certain accounts, such as the coveted cosmetic “skins” that change the in-game appearance of players.
Aside from the cosmetic and rare items they contain, people are willing to spend as much as hundreds of dollars on a Fortnite account for bragging rights.

The Night Lion report finds that the biggest sellers in the black market Fortnite accounts game are making about $25,000 per week, or a little over a million dollars per year should they stick with it for that long.
Click to expand...

How Fortnite accounts are hacked
Credential stuffing attacks on email accounts sometimes yield access to Fortnite accounts as a bonus.
Though there is sometimes this sort of targeted theft of high-value accounts, most Fortnite accounts are hacked with a set of automated tools.

The Night Lion report indicates that game publishers are not implementing effective means of curbing these account thefts and black market sales, with one of the largest sellers doing their best to meet a demand for a million Fortnite accounts and items per week at one point.
They also note that most end users are not aware of their account being compromised until they are locked out of it, and do not know where to find it once it is.
Click to expand...

Log in or Sign up

That 'Fortnite' cheating app is probably hiding malware

guest Guest

guest Guest

guest Guest

ronjor Global Moderator

guest Guest

guest Guest

guest Guest

Log in or Sign up

That 'Fortnite' cheating app is probably hiding malware

guest Guest

guest Guest

guest Guest

ronjor Global Moderator

guest Guest

guest Guest

guest Guest

Useful Searches