Activision, a leading video game company, is currently investigating a hacking campaign aimed at stealing players’ credentials, as reported by TechCrunch.
The hackers are targeting victims by infecting their computers with malware, which allows them to steal passwords for gaming accounts and crypto wallets, among others.
An individual familiar with the situation, requesting anonymity, revealed that Activision Blizzard is actively working to eliminate the malware and secure affected player accounts.
The methods by which the malware is spreading are still being investigated, with the possibility that it could be affecting users with third-party tools installed.
Contact Us
Have more information on this hack or other video game hacking incidents? You can securely contact Lorenzo Franceschi-Bicchierai on Signal at +1 917 257 1382, or through Telegram, Keybase, and Wire @lorenzofb, or via email. TechCrunch can also be reached through SecureDrop.
Activision spokesperson Delaney Simmons confirmed that they are aware of concerns regarding player credentials being compromised due to malware from unauthorized software downloads. However, the company affirms that its servers remain secure.
The initial discovery of the malware campaign was made by Zeebler, a developer of cheating software for the game Call of Duty. Zeebler identified hackers targeting gamers, including cheat users, to steal their login information.
Zeebler characterized this as an “infostealer malware campaign,” where malware disguised as legitimate software secretly collects usernames and passwords.
After detecting the campaign, Zeebler reached out to Activision Blizzard and other cheat software developers whose users were affected.
While TechCrunch verified a sample of allegedly stolen logins as genuine, it remains uncertain how old or recent the data is.
Regular players of Activision games are believed to be safe at this time, with only users of third-party applications like cheats being targeted.
Nevertheless, Activision’s Simmons recommends that users who suspect compromise should change their password and enable two-factor authentication as a precaution.