Fortnite Flaw Could Have Exposed Players to Account Takeovers

Fortnite via official Epic Games website 2019

Fortnite via official Epic Games website 2019

As for Check Point's bug report, Vanunu said the game maker, which banked a $3 billion profit a year ago, didn't offer a bug bounty reward, but the research team wasn't interested anyway.

More recently, The Fresh Prince of Bel-Air star Alfonso Ribeiro filed a lawsuit against Epic Games for not being compensated from the use of the so-called "Carlton dance".

In contrast, arguably one of the most popular paid-for games of 2018 - albeit only available on console - was Red Dead Redemption 2, which pulled-in $516 million during the fourth quarter following its release in October, according to SuperData. The report also said, but Epic did not confirm, that hackers could have eavesdropped on players' conversations in the game's voice chat.

Notably, this isn't the only bad Fortnite news to drop today.

The game, with 200 million registered users, accounts for nearly half of the firm's $5 billion to $8 billion estimated company value, according to data compiled by Bloomberg.

The combination of an unvalidated subdomain and cross-site scripting (XSS) in another allowed security researchers to bypass the protections implemented by the single sign-on (SSO) access control mechanism used for logging into Fortnite.

One of the vulnerability, if exploited is that the attacker might have complete access to the user's account and their personal information while enabling them to purchase virtual in-game currency via the user's payment card details.




To fall victim, users needed only to click on a crafted phishing link fraudulently coming from an Epic Games domain. These emotes are purchased with V-Bucks, which is a form of in-game currency that you can get by spending real money on Fortnite. "Once clicked, with no need even for them to enter any login credentials, their Fortnite username and password could immediately be captured the attacker".

The bug was fixed in mid-December, according to researchers who shared their findings with Fortnite's developer, Epic Games.

Fortnite has been the target of online scams in the past.

The news about V-Bucks being used to launder money is anything but surprising, given that crooks are using Fortnite to make money in a mind-boggling variety of ways.

The Check Point researchers said that organizations with customer-facing online portals must carry out proper validation checks on the login pages they ask their users to access.

'As always, we encourage players to protect their accounts by not reusing passwords and using strong passwords, and not sharing account information with others'.

Recommended News

  • Aggies head to the NFL Draft

    Aggies head to the NFL Draft

    The 5-foot-10, 195-pound Murray's Sooners lost in a college football playoff semifinal December 29 to eventual runner-up Alabama. But NFL Network's Ian Rapoport has spoken to some NFL scouts who believe Murray will fall to the second or third round.
    National Weather Service Says the Chances are Improving for Weekend Snow

    National Weather Service Says the Chances are Improving for Weekend Snow

    Any lingering precipitation is expected to end by late Friday morning, with a high of 40 degrees. The snow will likely turn to rain by late morning and the system should clear out by mid-day.
    Vegas Computer Releases Score Prediction For Saints-Rams

    Vegas Computer Releases Score Prediction For Saints-Rams

    As they showed in the last three quarters against Philadelphia, the Saints may have the defense required to reach the Super Bowl. The mayor of Atlanta has a clear preference in this weekend's NFC Championship game, and it's most definitely not the Saints .
  • Tsitsipas knocks defending champion Federer out of Australian Open

    Tsitsipas knocks defending champion Federer out of Australian Open

    Roger Federer and Stefanos Tsitsipas are going to face in the 4th round of the Australian Open . Roger Federer has been thwarted by his nemesis Rafael Nadal one too many times in his career.
    Mueller files court documents describing evidence of Manafort’s alleged lies

    Mueller files court documents describing evidence of Manafort’s alleged lies

    Multiple reports suggest that the special counsel's investigation may be preparing to wrap up soon - though no one knows for sure. Mueller's team sought to delay sentencing for former White House National Security Adviser Michael Flynn four times.
    Mike Pence declares ISIS 'defeated' after troops killed in Syria

    Mike Pence declares ISIS 'defeated' after troops killed in Syria

    USA and allied warplanes and artillery pieces launched 575 strikes against the group in Syria between December 30 and January 12. Independent reports by Reuters and others say four Americans were killed, though the precise figure hasn't been confirmed .
  • Russian jets collide over Sea of Japan; 2 dead, 1 missing

    Russian jets collide over Sea of Japan; 2 dead, 1 missing

    An An-12 and two Mi-8 helicopters from the search and rescue forces are searching for the pilots in the area where they ejected. The Defense Ministry said he was found in " satisfactory condition ", receiving no life-threatening injuries.
    Mueller Accused Manafort of Sharing Polling Data With Russian Spy

    Mueller Accused Manafort of Sharing Polling Data With Russian Spy

    That number could increase if he faces additional charges related to the alleged lies detailed in the Mueller memo. Manafort's lawyers pushed back on the allegation, made in a joint document sent to Jackson in the D.C. court.
    Space Force? Coming to a TV near you

    Space Force? Coming to a TV near you

    We can now look forward to a fresh barrage of wisecracks since Netflix announced a new Space Force comedy on Wednesday. The series will follow the men and women tasked with creating the space force and figuring out what exactly it does.
  • Chicago Cops Not Guilty In Cover-Up Of Laquan McDonald Shooting

    Chicago Cops Not Guilty In Cover-Up Of Laquan McDonald Shooting

    The video also prompted the dismissal of the city's police superintendent and calls for Chicago Mayor Rahm Emanuel to resign. Jason Van Dyke , who was booted from the force once he was convicted , was led into court Friday in a yellow jail jumpsuit.
    Super moon, a total Lunar eclipse and bright planets

    Super moon, a total Lunar eclipse and bright planets

    And if you can wait another two years after that, there's a North American total solar eclipse to look forward to in 2024. It will be easy to watch the eclipse, since the moon will be high in the sky, said Don Ficken, a member of the St.
    South Korea Stops Calling North Korea `Enemy' in Defense Report

    South Korea Stops Calling North Korea `Enemy' in Defense Report

    A diplomatic source in Washington said the objective of Suh's visit "was to hold discussions with US intelligence officials". It wasn't immediately known whether he was carrying a message from North Korean leader Kim Jong Un .

We are pleased to provide this opportunity to share information, experiences and observations about what's in the news.
Some of the comments may be reprinted elsewhere in the site or in the newspaper.
Thank you for taking the time to offer your thoughts.