Activision is allegedly in the process of looking into a hacking operation that is taking advantage of gamers’ login information. TechCrunch claims that malevolent actors have been effectively infecting victims’ PCs with malware and then utilizing their access to obtain cryptocurrency wallet and gaming account login credentials. The publisher of the video games has reportedly assisted victims in getting rid of the malware and taking back control of their accounts, but at this point it doesn’t have enough information to determine how the infection is propagating.
TechCrunch’s source said the malware “could be only affecting folks who have third-party tools installed,” insinuating that people are getting it from non-Activision-developed software typically used with its games. Delaney Simmons, Activision’s spokesperson, told the publication that the company is aware of “claims that some player credentials across the broader industry could be compromised from malware from downloading or using unauthorized software.” He added that the company’s servers “remain secure and uncompromised.”
That’s certainly a plausible theory, seeing as the hacking scheme appears to have been uncovered by someone known as Zeebler, who develops cheating software for Call of Duty. Zeebler told TechCrunch that he discovered the campaign when one of his customers had their account stolen for his software. Upon looking into it, he reportedly discovered a database containing stolen credentials. He also said that the malware is disguised to look like real software, but they were actually designed to steal the usernames and passwords victims type in. Zeebler is presumably talking about third-party tools like cheating software getting cloned to harvest people’s logins, but phishing schemes that use Activision’s official login design exist, as well. Bottom line is, people should be careful what they download and always double check if the login page they’re typing in is the real deal.