Video game publisher Ubisoft Entertainment SA has been forced to take its popular multiplayer game \u201cTom Clancy\u2019s Rainbow Six Siege\u201d offline following a breach that manipulated core gameplay systems and injected massive amounts of value into player accounts.<\/p>\n
Players logging into the game on Dec. 27 were greeted by billions of additional game credits.\u00a0According to<\/a> Bleeping Computer, about 2 billion in R6 game credits were granted to players, with a rough value of $13.33 million.<\/p>\n Along with flooding the game with in-game currency, the attackers also manipulated R6\u2019s ban and moderation systems, randomly banning and unbanning players and even broadcasting taunting or cryptic messages through administrative feeds.<\/p>\n Given the size of the breach and potential losses, Ubisoft then made an unprecedented decision to shut down all \u201cRainbow Six Siege\u201d servers globally, including the in-game marketplace and associated services.<\/p>\n \u201cA rollback is currently ongoing and afterwards, extensive quality control tests will be executed to ensure the integrity of accounts and effectiveness of changes,\u201d a post<\/a> on the Rainbow Six Siege X account on Sunday reads. \u201cThe team is focused on getting players back into the game as quickly as possible. Please know that this matter is being handled with extreme care and therefore, timing cannot be guaranteed. We will provide another update as soon as we know more.\u201d<\/p>\n Initial analysis suggests the breach may stem from deeper vulnerabilities in Ubisoft\u2019s backend infrastructure, possibly linked to exploitable database flaws that allowed attackers administrative control.<\/p>\n \u201cThis type of breach indicates serious backend vulnerabilities,\u201d William Fieldhouse, director of penetrating testing services company Aardwolf Security Ltd., wrote in a blog post<\/a>. \u201cWhen attackers can arbitrarily modify player currencies, inventories and account statuses, they\u2019ve essentially gained administrative access to core database functions. The inconsistent application of changes suggests either automated exploitation or multiple attack vectors being tested simultaneously.\u201d<\/p>\n Aardwolf Security also suggested that the attack vector likely exploited application programming interface endpoints that lacked proper authentication or authorization checks.<\/p>\n Though the exact details of how the breach took place are not confirmed, in the meantime, hundreds of thousands of R6 players remained locked out of the game. The breach will also be a wake-up call for the gaming industry in that even long-established titles are not immune to sophisticated attacks.<\/p>\n Image: SiliconANGLE\/Ideogram<\/p>\n Support our mission to keep content open and free by engaging with theCUBE community. Join theCUBE\u2019s Alumni Trust Network, where technology leaders connect, share intelligence and create opportunities.<\/p>\n 15M+ viewers of theCUBE videos, powering conversations across AI, cloud, cybersecurity and more About SiliconANGLE Media<\/p>\n SiliconANGLE Media is a recognized leader in digital media innovation, uniting breakthrough technology, strategic insights and real-time audience engagement. As the parent company of SiliconANGLE<\/a>, theCUBE Network<\/a>, theCUBE Research<\/a>, CUBE365<\/a>, theCUBE AI<\/a> and theCUBE SuperStudios \u2014 with flagship locations in Silicon Valley and the New York Stock Exchange \u2014 SiliconANGLE Media operates at the intersection of media, technology and AI.<\/p>\n Founded by tech visionaries John Furrier and Dave Vellante, SiliconANGLE Media has built a dynamic ecosystem of industry-leading digital media brands that reach 15+ million elite tech professionals. Our new proprietary theCUBE AI Video Cloud is breaking ground in audience interaction, leveraging theCUBEai.com neural network to help technology companies make data-driven decisions and stay at the forefront of industry conversations.<\/p>\n","protected":false},"excerpt":{"rendered":"Video game publisher Ubisoft Entertainment SA has been forced to take its popular multiplayer game \u201cTom Clancy\u2019s Rainbow…\n","protected":false},"author":2,"featured_media":208717,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[6],"tags":[97275,85,46,9662,125,116473],"class_list":{"0":"post-208716","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-technology","8":"tag-duncan-riley","9":"tag-il","10":"tag-israel","11":"tag-siliconangle","12":"tag-technology","13":"tag-ubisoft-takes-rainbow-six-siege-offline-after-breach-floods-player-accounts-with-billions-of-credits"},"_links":{"self":[{"href":"https:\/\/www.newsbeep.com\/il\/wp-json\/wp\/v2\/posts\/208716","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.newsbeep.com\/il\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.newsbeep.com\/il\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/il\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/il\/wp-json\/wp\/v2\/comments?post=208716"}],"version-history":[{"count":0,"href":"https:\/\/www.newsbeep.com\/il\/wp-json\/wp\/v2\/posts\/208716\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/il\/wp-json\/wp\/v2\/media\/208717"}],"wp:attachment":[{"href":"https:\/\/www.newsbeep.com\/il\/wp-json\/wp\/v2\/media?parent=208716"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.newsbeep.com\/il\/wp-json\/wp\/v2\/categories?post=208716"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.newsbeep.com\/il\/wp-json\/wp\/v2\/tags?post=208716"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
\n11.4k+ theCUBE alumni \u2014 Connect with more than 11,400 tech and business leaders shaping the future through a unique trusted-based network.<\/p>\n