#FORTNITE LOGIN FULL#

Enforcing two-factor authentication could mitigate this account takeover vulnerability.”Ĭheck Point has notified Epic Games of the vulnerability which has now been fixed.

These platforms are being increasingly targeted by hackers because of the huge amounts of sensitive customer data they hold. “Together with the vulnerabilities we recently found in the platforms used by drone manufacturer DJI, show how susceptible cloud applications are to attacks and breaches. These flaws provided the ability for a massive invasion of privacy,” said Oded Vanunu, head of products vulnerability research for Check Point. “Fortnite is one of the most popular games played mainly by kids. Once clicked, the user’s Fortnite authentication token could be captured by the attacker without the user entering any login credentials.Īccording to Check Point’s researchers, the potential vulnerability originated from flaws found in two of Epic Games’ sub-domains online that were susceptible to a malicious redirect, allowing users’ legitimate authentication tokens to be intercepted by a hacker from the compromised sub-domain. To fall victim to this attack, a player needs only to click on a crafted phishing link coming from a genuine Epic Games domain, which makes the link appear legitimate. Due to three flaws found in Epic Games’ web infrastructure, researchers were able to manipulate the token-based authentication process used by Fortnite in conjunction with Single Sign-On (SSO) systems such as Facebook, Google, Xbox and PlayStation to steal the user’s access credentials and take over their account. While Fortnite players had previously been targeted by scams that deceived them into logging into fake websites that promised to generate Fortnite’s ‘V-Buck’ currency, these new vulnerabilities could have been exploited without the player handing over any login details.Īttackers could have potentially gained access to a user’s account through vulnerabilities discovered in Fortnite’s user login process. The vulnerability would also have allowed attackers to listen to and record in-game chat as well as surrounding sounds and conversations within the victim’s home or other location of play.

If exploited, the vulnerability would have given an attacker full access to a user’s account and their personal information, as well as enabling them to purchase virtual in-game currency using the victim’s payment card details. Researchers at Check Point today shared details of vulnerabilities that could have affected any player of the hugely popular online battle game, Fortnite.

#FORTNITE LOGIN FULL#

Fortnite login