Trend Micro researchers note that the game “does not need to be installed on a victim’s device for this to work,” meaning hackers can just install the anti-cheat system as a preliminary step to then deploy the ransomware.ĭo you have information about these attacks? Or other ransomware incidents? We'd love to hear from you. In other words, they are abusing the anti-cheat system as a way to get access to more sensitive parts of the operating system and avoid getting caught by an antivirus before deploying the ransomware. At that point the hackers have the ability to turn off antivirus and install ransomware on the victims’ computers. But once they are in, the hackers are exploiting Genshin Impact’s anti-cheat system to get access to the computer’s kernel, a core part of the operating system that controls and has access to most of the computer's functions. Genshin Impact was released in 2020 by Chinese developer HoYoverse ( miHoYo in China) and has millions of players, who log into its game world via mobile devices, consoles, or on PC.įrom Trend Micro’s report, it’s unclear how the hackers gain the initial foothold into a targeted computer.
The hackers’ goal is to “mass-deploying ransomware,” according to Trend Micro.
“It was just a matter of time before a ransomware group noticed and started co-opting exploits that are openly shared.” We’ve seen cheats abuse anti-cheat drivers for years,” an employee of a games company, who asked to remain anonymous because they weren't allowed to speak to the press, told Motherboard.
“I’ve been expecting to see ransomware abuse an anti-cheat driver for a while.
0 kommentar(er)
