Arrow-right Camera
The Spokesman-Review Newspaper
Spokane, Washington  Est. May 19, 1883

Fortnite flaw put millions of players at risk, researchers say

Fortnite’s Battle Royale video game is displayed on an Apple iPhone. A major bug in Fortnite gave hackers access to millions of player accounts. (Andrew Harrer / Bloomberg)
Gwen Ackerma

A flaw in Epic Games Inc.’s Fortnite put the accounts of millions of users at risk of malicious attack, researchers from Check Point Software Technologies Ltd. said in a report Wednesday.

The vulnerability in the authentication process allowed hackers to send a link to the player that, once clicked, gave access to the user account where attackers could buy virtual currency and purchase game equipment that could then be transferred to a separate account and resold.

The hacker also could gain access to conversations held by the player and their friends, which could be used to exploit the account owner, often children under 18.

“We were made aware of the vulnerabilities and they were soon addressed,” an emailed statement from Epic Games said. “We encourage players to protect their accounts by not re-using passwords and using strong passwords, and not sharing account information with others.” It was unclear whether the vulnerability discovered by Check Point was ever exploited.

As of June, Fortnite had been played by 125 million people and was on track to generate $2 billion for Epic Games. The game revolves around a cartoonish, last-character-standing battle where players fight for weapons and resources. It’s free to play and available on multiple devices from mobile phones to video game consoles.

“Needless to say, that along with this massive invasion of privacy, the financial risks and potential for fraud is vast,” Check Point said of the discovered flaw. The company’s head of products vulnerability research, Oded Vanunu, said his 6- and 9-year-old children play Fortnite, as do millions of school children around the globe.

“Your kids are playing a game and people can listen to what they are doing,” Vanunu said. “The child thinks he is talking to a 12-year-old kid, but he is talking to adults who might say ‘send me a picture of that and I will give you this weapon.’ This is the craziness of this game.”

Developer Epic makes money from Fortnite by charging players for decorative items like costumes and props.