• Menu
  • Skip to main content
  • Skip to primary sidebar

The Cyber Security News

Latest Cyber Security News

Header Right

  • Latest News
  • Vulnerabilities
  • Cloud Services
Cyber Security News

GTA V vulnerability exposes PC users to partial remote code execution attacks

You are here: Home / General Cyber Security News / GTA V vulnerability exposes PC users to partial remote code execution attacks
January 23, 2023

Rockstar Games logo appearing against a backdrop of the most recent games it has released

Getty Photos

Popular video clip game Grand Theft Car V (GTA V) has been uncovered to incorporate a flaw making it possible for for partial remote code execution (RCE), amidst phone calls for customers to prevent the recreation entirely until eventually a fix has been launched. 

✔ Approved From Our Partners
AOMEI Backupper Lifetime

Protect and backup your data using AOMEI Backupper. AOMEI Backupper takes secure and encrypted backups from your Windows, hard drives or partitions. With AOMEI Backupper you will never be worried about loosing your data anymore.

Get AOMEI Backupper with 72% discount from an authorized distrinutor of AOMEI: SerialCart® (Limited Offer).

➤ Activate Your Coupon Code


Hackers had at first used the flaw to give them selves elevated degrees inside the match and ban other end users, but it has given that turn out to be obvious that the exact same exploits can be utilised to obtain partial RCE on victims’ PCs. 

If risk actors use the flaw to achieve comprehensive RCE, they could start malware on the gadgets of victims employing the recreation as a staging stage.

As the extent of steps that can be carried out making use of the vulnerability are continue to being analysed, community members have urged other people to stay absent from the match.

Me waking up this early morning to a single of the worst exploits in GTA Online historical past(Seriously, don’t play even with Guardian. The risk is just not really worth it. You risk finding your account corrupted, banned, or your personal computer hacked.) pic.twitter.com/e930iN89Vs

— Speyedr (@Speyedr_AU) January 21, 2023

Stories have indicated that hackers have even been capable to power them selves into non-public on the net periods amongst friends, which means that all on line use of the video game could be thought of unsafe.

Twitter consumer ‘Tez2’ was between the 1st to alert that the flaw will allow for partial distant code execution. They have considering that tweeted that “Rockstar is mindful and has been logging any affected account just before the first mod menu started abusing the new exploits”.

The flaw has been assigned CVE-2023-24059 and is awaiting a CVSSv3 severity score.

“With on the internet gaming getting particularly common and worthwhile, there have often been criminals, and mischief-makers on line who have tried out to hack the method into obtaining simple victories, or social engineering other gamers,” said Javvad Malik, lead security awareness advocate at KnowBe4.

“On the other hand, owning this sort of a vulnerability in these types of a well-known activity is exceptional, and it can likely have a large effects on players. As quickly as a patch is out there, individuals really should set up it to avoid remaining victims.”

The game’s community on Reddit commenced to warn about the vulnerability on 20 January, and a day later a local community moderator issued a put up urging people to report the issue to Rockstar and to chorus from participating in the activity. 

In the very same put up, a momentary take care of for account corruption was mentioned: deleting the “Rockstar Games” from a device’s Files folder, and reloading the video game.

Even so, this is only helpful to those looking for to carry on actively playing the video game, and will not cure possible malware or file deletion that arises as a result of RCE.

GTA V is the 2nd greatest-providing video game of all time, getting marketed over 170,000,000 copies to date. It is accessible on a massive variety of platforms, while it is the Laptop version that is made up of the flaw. All those who use their laptop computer for the two work and individual use, somewhat than a designated small business notebook, could be at risk from the flaw.

The sport has been a hotspot of hacking exercise for some a long time, Rockstar has struggled to maintain GTA On the net servers clean up of hackers trying to get to cheat for gain, or get legitimate buyers banned. At time of creating, Rockstar has not issued a statement addressing the issue on its social media channels. 

Comparisons can be drawn with a identical incident from January 2022, in which the match Dark Souls’ servers had been taken offline following the identification of an RCE vulnerability in the game’s servers.

A streamer was able to operate a Powershell script on yet another steamer’s unit making use of the flaw, in a demonstration of its dangerous probable in the fingers of malicious hackers.

The flaw influenced multiplayer servers in the game titles Dark Souls: Remastered, Dark Souls: Prepare to Die Version, Dark Souls 2, and Dark Souls 3. It took creator Bandai Namco 7 months to set servers back on line in the aftermath. GTA On the net servers continue to be lively despite the threat.

IT Pro has approached Rockstar Game titles for remark.




Some areas of this post are sourced from:
www.itpro.co.uk

Previous Post: «samsung galaxy store app found vulnerable to sneaky app installs Samsung Galaxy Store App Found Vulnerable to Sneaky App Installs and Fraud
Next Post: GTA V vulnerability exposes PC users to partial remote code execution attacks Cyber Security News»

Reader Interactions

Leave a Reply Cancel reply

Your email address will not be published. Required fields are marked *

Primary Sidebar

Report This Article

Recent Posts

  • GTA V vulnerability exposes PC users to partial remote code execution attacks
  • GTA V vulnerability exposes PC users to partial remote code execution attacks
  • GTA V vulnerability exposes PC users to partial remote code execution attacks
  • Samsung Galaxy Store App Found Vulnerable to Sneaky App Installs and Fraud
  • SaaS Security Posture Management (SSPM) as a Layer in Your Identity Fabric
  • Mailchimp data breach impact unravels as second customer reveals extent of damage
  • Riot Games Halts Work After Cyber-Attack
  • Threat Actors Turn to Sliver as Open Source Alternative to Popular C2 Frameworks
  • New Government Cyber Advice for £100bn UK Charity Sector
  • Freshworks CISO Jason Loomis embraces the ‘shift left’ amid surging supply chain threats

Copyright © TheCyberSecurity.News, All Rights Reserved.