Hacked by playing Call of Duty WW2 on Gamepass?

About this video

• Video Title: Hacked by playing Call of Duty WW2 on Gamepass?
• Channel: PC Security Channel
• Speakers: Leo
• Duration: 00:05:34

Overview

This video discusses a security vulnerability in the PC version of Call of Duty: World War II available on Game Pass. The vulnerability, a Remote Code Execution (RCE), allowed hackers to execute commands on players' computers, leading to actions like opening command prompts, changing desktop backgrounds, and even remote shutdowns. The video explains what an RCE is, why older games ported to PC with minimal updates are more susceptible, and the potential for these vulnerabilities to be sold on the dark web for more malicious purposes. The PC version of the game was temporarily taken offline due to this issue.

Key takeaways

• Remote Code Execution (RCE) Vulnerability: Call of Duty: World War II on Game Pass had an RCE vulnerability, allowing hackers to run arbitrary code on a user's system.
• Exploitation Impact: Hackers used this vulnerability to display messages, change desktop backgrounds, and perform remote shutdowns on affected players' computers.
• Risk with Older, Repackaged Games: Games ported to PC with minimal effort and added online functionality, especially older titles, are more prone to unpatched security flaws. Many require administrator privileges, increasing the potential damage.
• Dark Web Market for Exploits: RCE vulnerabilities are actively bought and sold on the dark web, potentially for more sinister purposes than just pranks.
• Microsoft's Initial Response: Microsoft's initial response to the issue was dismissive, stating it wasn't a violation of their terms, highlighting a potential lack of security expertise in their support teams.
• Mitigation: The PC version of the game was temporarily removed from download, and the video suggests playing older games offline or using original versions for increased safety.