Identity Fraud in Focus quarterly report
8 min
If you have a 15-year-old, or simply know someone who does, then chances are you’ve heard of Fortnite. Last year, it became the most popular video game on Earth, with an estimated 125 million users, and new reports suggest that number might have grown to 200 million.
Unfortunately, it’s not just a fun pastime for video game enthusiasts. Hackers, identity thieves, and cybercriminals are now using the platform to commit a wide array of crimes, targeting both your children and your bank account.
A security flaw exposes millions
In a report issued January 16, researchers from Check Point Software Technologies Ltd. found that a security flaw in the authentication process allowed hackers to send players malicious links. Once these links were clicked, cybercriminals could make in-game purchases on the victims’ accounts. The purchased items could then be transferred or sold to other users.
Equally troubling, hackers could also access the victim’s private messages and read their chat history. This is particularly troubling given the fact that many players are children, and hackers might have gained unprecedented access into their lives.
As of the publishing of this article, it’s unclear whether hackers actually exploited the vulnerability Check Point discovered. Epic Games, the creators of Fortnite, told Bloomberg they corrected the issue shortly after the discovery:
“We were made aware of the vulnerabilities and they were soon addressed. We encourage players to protect their accounts by not re-using passwords and using strong passwords, and not sharing account information with others.”
Criminals using Fortnite to launder money
This isn’t the only negative publicity Fortnite received in January. An investigation by cyber intelligence firm SixGill found that cybercriminals are using the popular game to launder money. Here’s how the scam works.
Cybercriminals obtain stolen credit and debit cards
They create new Fortnite accounts
Using the stolen payment details, they purchase in-game currency and skins (outfits for a character or avatar)
Cybercriminals then sell the account for a fraction of the amount of in-game currency and skin value on eBay or the dark web
After receiving payment, they transfer the Fortnite account and password to the buyer
When Variety contacted Epic Games for comment, the game manufacturer released a statement that sounded frighteningly familiar:
“Epic Games takes these issues seriously, as chargebacks and fraud put our players and our business at risk. As always, we encourage players to protect their accounts by turning on two-factor authentication, not re-using passwords and using strong passwords, and not sharing account information with others.”
Fortnite isn’t alone
Data breaches and security incidents aren’t isolated to Fortnite. Many video games have undergone their own privacy-related scandals in recent months, with two of the most significant being Fallout 76 and League of Legends.
Fallout 76, one of the most-anticipated games of all time, experienced a massive data breach last December. When some users were redeeming in-game items, they were inadvertently granted access to the support tickets of other players, as well as other sensitive data like addresses and contact information.
League of Legends, another massively popular online game, continues to put its users at risk due to improper default voice chat settings. If strangers are invited to join your child’s lobby or party, they can easily spy on their conversations with others.
Cybercriminals aren’t the only ones putting your children in danger
While cybercriminals certainly pose a significant risk to the wellbeing of your children, they aren’t the only ones putting your kids at risk. Often, we place ourselves at risk by not properly evaluating the impact our online decisions might have. That’s why it’s incredibly important you and your children stay vigilant anytime you’re online, but especially while gaming.
If you’re a gamer yourself, make sure to check through your privacy settings on all your platforms, and check back in every so often, especially if there’s an update For more information about preserving your child’s online safety, check out ESRB, which has some helpful tips.