{"id":758687,"date":"2020-05-21T05:30:40","date_gmt":"2020-05-21T09:30:40","guid":{"rendered":"https:\/\/www.prime-wow.com\/?p=758687"},"modified":"2020-05-21T05:30:40","modified_gmt":"2020-05-21T09:30:40","slug":"hackers-infect-multiple-game-developers-with-advanced-malware","status":"publish","type":"post","link":"https:\/\/www.prime-wow.com\/?p=758687","title":{"rendered":"Hackers infect multiple game developers with advanced malware"},"content":{"rendered":"
\n
\"Hackers<\/p>\n

Enlarge<\/a> (credit: Bloomberg | Getty Images)<\/p>\n<\/figure>\n

<\/div>\n

One of the world\u2019s most prolific hacking groups recently infected severalMassively Multiplayer Online game makers, a feat that made it possible for the attackers to push malware-tainted apps to one target\u2019s users and to steal in-game currencies of a second victim\u2019s players.<\/p>\n

Researchers from Slovakian security company ESET have tied the attacks to Winnti, a group that has been active since at least 2009<\/a> and is believed to have carried out hundreds of mostly advanced attacks. Targets have included Chinese journalists, Uyghur and Tibetan activists, the government of Thailand, and prominent technology organizations. Winnti has been tied to the 2010 hack that stole sensitive data from Google and 34 other companies<\/a>. More recently, the group has been behind the compromise of the CCleaner distribution platform that pushed malicious updates to millions of people<\/a>. Winnti carried out a separate supply-chain attack that installed a backdoor on 500,000 ASUS PCs<\/a>.<\/p>\n

The recent attack used a never-before-seen backdoor ESET has dubbed PipeMon. To evade security defenses, PipeMon installers bore the imprimatur of a legitimate Windows signing certificate that was stolen from Nfinity Games during a 2018 hack of that gaming developer. The backdoor\u2014which gets its name for the multiple pipes used for one module to communicate with another and the name of the project name of the Microsoft Visual Studio used by the developers\u2014used the location of Windows print processors<\/a> so it could survive reboots. Nfinity representatives weren’t immediately available to comment.<\/p>\n<\/div>\n

Read 6 remaining paragraphs<\/a> | Comments<\/a><\/p>\n

\n<\/a> <\/a> <\/a> <\/a>\n<\/div>\n


\n
\nSource: Ars Technica – Hackers infect multiple game developers with advanced malware<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

Enlarge (credit: Bloomberg | Getty Images) One of the world\u2019s most prolific hacking groups recently infected severalMassively Multiplayer Online game makers, a feat that made it possible for the attackers to push malware-tainted apps to one target\u2019s users and to … Continue reading →<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":758688,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"ngg_post_thumbnail":0,"footnotes":""},"categories":[27,110],"tags":[73],"class_list":["post-758687","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-ars-technica","category-unfiltered-rss","tag-ars-technica"],"_links":{"self":[{"href":"https:\/\/www.prime-wow.com\/index.php?rest_route=\/wp\/v2\/posts\/758687","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.prime-wow.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.prime-wow.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.prime-wow.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.prime-wow.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=758687"}],"version-history":[{"count":0,"href":"https:\/\/www.prime-wow.com\/index.php?rest_route=\/wp\/v2\/posts\/758687\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.prime-wow.com\/index.php?rest_route=\/wp\/v2\/media\/758688"}],"wp:attachment":[{"href":"https:\/\/www.prime-wow.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=758687"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.prime-wow.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=758687"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.prime-wow.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=758687"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}