An unknown threat actor created malicious game modes for the Dota 2 multiplayer online battle arena (MOBA) video game that could have been exploited to establish backdoor access to players' systems. The modes exploited a high-severity flaw in the V8 JavaScript engine tracked as CVE-2021-38003 (CVSS score: 8.8), which was exploited as a zero-day and addressed by Google in October 2021. "Since V8

CVE-2021-38003coverage

game modes dota access players

2 more topics

systems v8

Bleeping Computer

4 years ago

Malicious Dota 2 game modes infected players with malware

Security researchers have discovered four malicious Dota 2 game modes that were used by a threat actor to backdoor the players' systems. [...]

dota game modes players malicious

6 more topics

malware security researchers four threat actor

Bleeping Computer

4 years ago

Malicious Dota 2 game mods infected players with malware

Security researchers have discovered four malicious Dota 2 game mods that were used by a threat actor to backdoor the players' systems. [...]

dota game mods players malicious

6 more topics

malware security researchers four threat actor

Bleeping Computer

4 years ago

GTA Online bug exploited to ban, corrupt players’ accounts

Grand Theft Auto (GTA) Online players report losing game progress, in-game money being stolen, and being banned from game servers due to an alleged vulnerability in the game's PC version. [...]

gta online players game bug

13 more topics

ban accounts grand theft auto report progress in-game money servers vulnerability game's pc

Bleeping Computer

4 years ago

Backdoored Chrome extension installed by 200,000 Roblox players

Chrome browser extension 'SearchBlox' installed by more than 200,000 users has been discovered to contain a backdoor that can steal your Roblox credentials as well as your assets on Rolimons, a Roblox trading platform. [...]

roblox chrome extension players browser

5 more topics

searchblox users credentials assets rolimons

Bleeping Computer

4 years ago

2K Games says hacked help desk targeted players with malware

American video game publisher 2K has confirmed that its help desk platform was hacked and used to target customers with fake support tickets pushing malware via embedded links. [...]

games desk malware players american

7 more topics

video publisher platform target customers support tickets

The Register

4 years ago

Singapore promises 'brutal and unrelentingly hard' action on dodgy crypto players

But welcomes fast cross-border payments in central bank digital currencies In the same week that it welcomed the launch of a local center of excellence focused on crypto-inspired central bank digital currencies, Singapore's Monetary Authority (MAS) has warned crypto cowboys they face a rough ride in the island nation.…

crypto bank currencies singapore action

14 more topics

dodgy players payments week launch center excellence singapore's monetary authority mas cowboys face island

Bleeping Computer

3 months ago

Fake Roblox Xeno script launcher pushes infostealer, RAT malware

Fake Xeno Executor installers are infecting unsuspecting Roblox players with malware that provides remote access and steals sensitive information. [...]

roblox xeno xeno script launcher fake xeno executor installers infostealer

6 more topics

rat malware malware remote access steals sensitive information unsuspecting roblox players script launcher

The Hacker News

4 months ago

What Changes When Your Software Supply Chain Includes AI Writing Your Code?

Software supply chain security was hard enough. Then AI joined the build pipeline. For five years, "software supply chain security" meant one question: what's in your code? Which open-source packages, which versions, which transitive dependencies three layers deep that nobody chose on purpose? SolarWinds, Log4Shell, and XZ Utils all taught the same lesson: the risk lives less in the code a

software supply chain security ai build pipeline open-source packages versions

9 more topics

transitive dependencies three layers deep solarwinds log4shell xz utils lesson risk code supply chain