Hackers infect multiple game developers with advanced malware:
One of the world’s most prolific hacking groups recently infected several Massively Multiplayer Online game makers, a feat that made it possible for the attackers to push malware-tainted apps to one target’s users and to steal in-game currencies of a second victim’s players.
Researchers from Slovakian security company ESET have tied the attacks to Winnti, a group that has been active since at least 2009 and is believed to have carried out hundreds of mostly advanced attacks.
[...] The recent attack used a never-before-seen backdoor that ESET has dubbed PipeMon. To evade security defenses, PipeMon installers bore the imprimatur of a legitimate Windows signing certificate that was stolen from Nfinity Games during a 2018 hack of that gaming developer. The backdoor—which gets its name for the multiple pipes used for one module to communicate with another and the project name of the Microsoft Visual Studio used by the developers—used the location of Windows print processors so it could survive reboots. Nfinity representatives weren't immediately available to comment.
In a post published early Thursday morning, ESET revealed little about the infected companies except to say they included several South Korea- and Taiwan-based developers of MMO games that are available on popular gaming platforms and have thousands of simultaneous players.
[...] Windows requires certificate signing before software drivers can access the kernel, which is the most security-critical part of any operating system. The certificates—which must be obtained from Windows-trusted authorities after purchasers prove they are providers of legitimate software—can also help to bypass antivirus and other end-point protections. As a result, certificates are frequent plunder in breaches.
(Score: 4, Funny) by Dr Spin on Monday May 25 2020, @06:55AM (1 child)
That people are still using Windows on Internet connected machines.
It has never been suitable for that.
Warning: Opening your mouth may invalidate your brain!
(Score: 0) by Anonymous Coward on Monday May 25 2020, @12:05PM
FTFY
(Score: 2) by inertnet on Monday May 25 2020, @07:47AM
Winnti, sounds like Winti, an Afro-Surinamese religion [wikipedia.org], practiced here in the Netherlands because Suriname is a former colony and many people moved here when it became an independent country.
It's a fitting name for hackers because we simply call it Suriname voodoo.
(Score: -1, Spam) by Anonymous Coward on Monday May 25 2020, @09:13PM
Are you enjoying COVID-19, Boomers? I hope you are, because your political response to the pandemic has completely destroyed the economy. Did we really need a Great Recession in 2008 caused by you, and a Great Lockdown in 2020 caused by you? Are you proud of yourselves for creating an economic depression even worse than the Great Depression of the 1930s? Are you proud of yourselves, Boomers? Your legacy will be economic ruin for all. You don't care as long as you Boomers continue to receive your pensions. You Boomers don't have jobs. You Boomers don't create jobs. You Boomers don't do anything for anyone ever. You Boomers are utterly worthless parasites. You don't care about anybody except yourselves. Everybody except you is forced at gunpoint to wear a facemask while you Boomers sit in your giant mansions laughing and waiting to die when you will be buried with your fortunes so nobody will ever touch your precious money.
Boomers did COVID-19.