Fortnite security flaw allowed hackers to overtake user accounts easily

Smart Android And Trik-Commenting on Andorid indeed never endless, because smart devices this one is often updated every certain amount of time. So that the market can always be garapnya menerinya with pleasure. And it is not denied if this device has become the lifestyle of each society. To not wonder if the 6th business information and many are turning to mobail smartphone. With Android which thoroughly dominated the mobile industry, choosing the best Android smartphone is almost identical to choose the best smartphone, period. But while Android phones have few real opponents on other platforms, internal competition is intense.

From the sleek devices impress with the design premium, up to a full plant furniture features, to a very good device, and affordable mobile phone has a heavy weight, the Android ecosystem inhabited by a diverse range of attractive mobile phone Fortnite security flaw allowed hackers to overtake user accounts easily Fortnite security flaw allowed hackers to overtake user accounts easily,But "oversize" are subjective, and sometimes pieces of the specification and a list of features is not enough to get an idea of how good a phone. In this roundup, we look at the absolute best-the Android phone you can't go wrong with. The habits of young people or to accentuate trand blindly lifestyle, make this a medoroang this clever device industry vying to do modifications to the device, with a distinctly vitur vitur-tercanggihnya. So it can be received over the counter Fortnite security flaw allowed hackers to overtake user accounts easily

A Fortnite security flaw was discovered by Check Point Research towards the end of 2018. The vulnerability allowed hackers to easily initiate a phishing scheme by sending users links that looked like login pages, but actually harvested user accounts.

CPR notified Epic Games of the flaw in November, and Epic patched the vulnerability weeks later. However, during that time — and for some time before CPR sent the notice — Fortnite users were at serious risk of fraud.

CPR details exactly how the exploit worked in a very technical explanation on its blog. However, the gist of the process was fairly simple:

• Hackers exploit the single-sign-on system Fortnite uses, which allows a user to login to Fortnite using other accounts, such as Facebook, Nintendo, Google+, etc.
• The hackers then send a link to a user which looks legit. However, it actually redirects them through a different server which scrapes their login info.
• Since the link looked legit and the user didn't have to actually enter their credentials, the user thinks nothing happened.
• Hackers obtain the login info, overtake the account, and use the attached payment options to make fraudulent transactions.

Editor's Pick

class="related_article_item">

Fortnite vs PUBG: Which one is right for you?

The basic premise of Fortnite and PUBG is the same: you parachute onto an island with up to 99 other players, search for guns, ammo, and other supplies, and then try to take down as …

According to The Verge, hackers who used this exploit would buy Fortnite's in-game currency (V-Bucks) using the hijacked accounts, gift those V-Bucks to another account, and then sell the V-Bucks at a discounted rate to other players on the dark web.

Fortnite earns billions of dollars from in-game sales, so this fraudulent activity could be quite lucrative.

Epic Games said in a statement: "We were made aware of the vulnerabilities and they were soon addressed. We thank Check Point for bringing this to our attention. As always, we encourage players to protect their accounts by not re-using passwords and using strong passwords, and not sharing account information with others."

Although this vulnerability is now patched, this should be a reminder to all to use strong passwords, change them often, and only enter credentials into trustworthy websites.

NEXT: Fortnite update hub

from Android Authority http://bit.ly/2TTybtK
via IFTTT

Tweet

Subscribe to receive free email updates: