2K Games and Rockstar Hacked, Malware Sent to Gamers

[btarunr]

Late September, the customer support system of 2K Games and Rockstar Games was hacked according to the game studio. Both studios are owned by Take-Two Interactive. This support desk had access to every gamer registered with 2K, and so the hacker was able to use the vast mailing list to send out malware to gamers, which could steal credentials and compromise their security. 2K discovered this hack, and is sending out e-mails to gamers warning them about the incident, to apprise them of what it's doing, and to help them avoid this malware. 2K Games in the e-mail to gamers said that it's working with Law Enforcement to identify and bring to justice the people behind this hack. In the meantime, they warned gamers not to click on unknown links in e-mails and to use reputable antivirus programs.



View at TechPowerUp Main Site | Source

 

[dgianstefani]

 

[Vayra86]

Always online with monetization is nice innit!

 

[DeathtoGnomes]

Thats a good turn around time, notifying pretty fast, most companies take 2-3 months before telling its consumer base.

 

[human_error]

Thats a good turn around time, notifying pretty fast, most companies take 2-3 months before telling its consumer base.

GDPR and other data laws require a fast turnaround for notifying customers of a data breach, which this is in addition to the malware emails.

I feel this is just rubbing salt into the wounds of customers - "Hi take two I have a problem with a game I bought from you" - "sorry to hear that, here have a virus".

 

[Chaitanya]

And still idiot developers will continue with online only nonsense.

 

[AsRock]

Hacked haha, i love to know for what because their support is trash, i guess just like there games always are haha. To think you can give them 100% solid proof of cheating hacking and god knows what and only get a BS response to the point they start talking about a different game.

 

[delshay]

If they are clever enough to do the hack, one would think the best antivirus will have zero effect. One would assume they would be ahead of this.

 

[KrazedOmega]

Hmm, maybe this is why I all of a sudden had over twenty spam emails in my junk folder.

 

[Deleted member 185088]

They were more focused on finding new ways to milk GTA V even more, they didn't have time to secure their servers.

 

[zlobby]

More or less everything that comes from 2K is malware.

 

[LabRat 891]

Oh, joy.
Can't wait until malware gets 'pushed' via update to the consoles and PCs both...

 

[cvaldes]

More or less everything that comes from 2K is malware.

C’mon, BioShock wasn’t so bad.

 

[80-watt Hamster]

Always online with monetization is nice innit!

And still idiot developers will continue with online only nonsense.

The customer support system was compromised, not the game servers. Always-online is a completely separate issue from this.

 

[canucker]

Hmm, maybe this is why I all of a sudden had over twenty spam emails in my junk folder.

i have been seeing similar emails after i got that email from 2k

 

[R-T-B]

C’mon, BioShock wasn’t so bad.

They are also making/publishing KSP 2... so I have to have hope.

 

[Chaitanya]

The customer support system was compromised, not the game servers. Always-online is a completely separate issue from this.

If they cannot keep their customer support servers secure then what confidence should we have their game servers arent already compromised.

 

[MarsM4N]

If they cannot keep their customer support servers secure then what confidence should we have their game servers arent already compromised.

They say it was only a support desk that was hacked: 2K confirms its support desk was hacked to send malware to gamers
And it was only "customers service data" that was stolen. Meaning if you never contacted 2K, your data is safe.

There's a great article on siliconANGLE, explaining how they where compromised & hinting that it could be connected to the Rockstar hack. Given the time frame, it's likely the hackers got some helpful data from Rockstar for the 2K breach. It's the same company after all. And who knows what else they got. To me it looks like they spoon feeding us their incompetence.

https://siliconangle.com/2022/09/21/game-developer-2k-hacked-days-rockstar-hack-gta6-leak/

Oh, joy.
Can't wait until malware gets 'pushed' via update to the consoles and PCs both...

If they could they would have. But each game patch goes through a certification process. On Steam, Playstation, xBox, etc. Chances are high it will be picked up by at least one.
It's not like the "Google Play Store" where tons a shady "developers" can upload their malware invested apps without getting noticed.

P.S.: more on the topic in the TPU thread 2K Games Hacked

 

[Chaitanya]

They say it was only a support desk that was hacked: 2K confirms its support desk was hacked to send malware to gamers
And it was only "customers service data" that was stolen. Meaning if you never contacted 2K, your data is safe.

There's a great article on siliconANGLE, explaining how they where compromised & hinting that it could be connected to the Rockstar hack. Given the time frame, it's likely the hackers got some helpful data from Rockstar for the 2K breach. It's the same company after all. And who knows what else they got. To me it looks like they spoon feeding us their incompetence.

https://siliconangle.com/2022/09/21/game-developer-2k-hacked-days-rockstar-hack-gta6-leak/


If they could they would have. But each game patch goes through a certification process. On Steam, Playstation, xBox, etc. Chances are high it will be picked up by at least one.
It's not like the "Google Play Store" where tons a shady "developers" can upload their malware invested apps without getting noticed.

P.S.: more on the topic in the TPU thread 2K Games Hacked

Why go as far as Play store, google Chrome is by far the worst browser on market these days.

Google's Chrome most vulnerable browser; 303 flaws reported in 2022

In second place is Mozilla's Firefox with 117 vulnerabilities recorded in 2022, and a total of 2,361 vulnerabilities found since launch.

www.moneycontrol.com

 

[zlobby]

Why go as far as Play store, google Chrome is by far the worst browser on market these days.

Google's Chrome most vulnerable browser; 303 flaws reported in 2022

In second place is Mozilla's Firefox with 117 vulnerabilities recorded in 2022, and a total of 2,361 vulnerabilities found since launch.

www.moneycontrol.com

And not to mention their WebView implementation that is exposing otherwise safe applications to a huge threat landscape.

 

[P4-630]

Google's Chrome most vulnerable browser; 303 flaws reported in 2022

In second place is Mozilla's Firefox with 117 vulnerabilities recorded in 2022, and a total of 2,361 vulnerabilities found since launch.

www.moneycontrol.com

If you read it all:

Google has also fixed these vulnerabilities.

 

[cvaldes]

If they cannot keep their customer support servers secure then what confidence should we have their game servers arent already compromised.

This is correct.

TRUST IS EARNED.

However much trust any company earns over the years, these incidents squander a bunch of it and it doesn't return in a week. Did 2K/Rockstar have oodles of trust before?

The same applies to Google Chrome. Sure, they fixed all of the vulnerabilities. But they don't repair all of the damage to their reputation.

Trust is given freely by some. For others it is a long grind to earn trust.

Companies need to focus on gaining the trust of the skeptics not the people who will believe anything. Grabbing the low hanging fruit is easy.

 

[Vayra86]

The customer support system was compromised, not the game servers. Always-online is a completely separate issue from this.

Thanks for setting the record straight there, but even still, the reason these hacks happen are often closely related to monetization (of account data). And that is only possible because online accounts represent value.

We've painted online targets on our backs here, and there is no safety net like there is for, say, banking.

I've had my Rockstar account hacked once, and my Ubisoft account as well. Both times customer service was quick to deliver password resets, but still, its clear as day companies do an utterly shit job at protecting you as a customer by properly securing systems, while they run profitable services. Strange indeed.