The support platform of popular publisher 2K Games has been hacked in an effort to spread malware (opens in a new tab) among gamers, the company confirmed.
In a tweet, 2K Games said it recently discovered that hackers managed to "illegally access" the credentials of one of its vendors on the support platform.
"The unauthorized party has sent a communication to some players that contains a malicious link. Please do not open any email or click on any link you receive from the 2K Games support account," the company warned.
Configuring multi-factor authentication
The attackers first opened a fake support ticket and responded shortly after. In the response message, they would share a file called "2K Launcher.zip", inviting players to run it on their terminals. The file turned out to be RedLine Stealer, a well-known information thief that is capable of, among other things, entering passwords stored in the browser, stealing banking details and cryptocurrency wallets. Additionally, RedLine can recover VPN credentials, web browser history, and cookies.
Knowing the type of malware the threat actor was about to distribute, 2K advised potential victims to reset all passwords stored in the browser, enable multi-factor authentication where possible (using an app instead of SMS), install an antivirus program and check email accounts for any forwarding rules.
In the meantime, 2K has taken its support portal offline as it further investigates the incident.
"We will post a notice when you can resume interaction with official 2K support emails, as well as provide additional information on how best to protect yourself from malicious activity," 2K said.
At this time, it's unclear who the threat actors behind the attack are, but BleepingComputer speculates that it could be the same group that recently broke into Rockstar Games: Lapsus€.
"Both companies are subsidiaries of Take-Two Interactive, one of the largest video game publishers in America and Europe," he said.
Via: BleepingComputer (Opens in a new tab)