Not cool: Bitcoin mining malware found in ESEA server client | PCGamesN

Buzz Aldrin's Space Program Manager launches by aiming for the Moon

Playing With Myself: Salt

Tome: Immortal Arena is another MOBA, but it's doing away with a lot of genre mainstays

Team Fortress 2

Not cool: Bitcoin mining malware found in ESEA server client

The ESEA server client, commonly used as an anti-cheating measure in games of Counter-Strike, StarCraft 2 and Team Fortress 2, has been discovered to carry malware that uses unsuspecting players’ graphics cards to mine Bitcoins. 

Users of the client have reported that their GPUs have overheated and been disabled by the bitcoin mining process. 

The exploit was uncovered by user ‘ENJOY ESEA SHEEP’, who noticed unusually high GPU usage on his PC while idle. Upon further investigation, he discovered that his PC had been farming bitcoins for a member of the ESEA community.

ESEA co-founder Eric ‘lpkane’ Thunberg initially credited the exploit to an aborted April Fools’ joke gone wrong.

“Back towards the end of march, as btc was skyrocketing, jaguar and i were talking about how cool it would be if we could use massive amounts of gpus logged into the client to mine,” he explained.

“We went back and forth about it, considered doing something for april fools, didn't get it done in time, and eventually elected to put some test code in the client and try it on a few admin accounts, ours included.

“We ran the test for a few days on our accounts, decided it wasn't worth the potential drama, and pulled the plug, or so we thought.”

Thunberg suspected that a server restart had triggered a change in the ESEA client’s settings, which had in turn accidentally enabled the exploit for all idle users. Mystery apparently solved. However, less than two hours of vehement community reaction later he discovered that the incident had been “way more shady than I originally thought”.

“Definitely not something that has only been happening the past 48 hours,” reported ESEA user brasky. “My GPU has been 'oddly' running at high loads for at least 2 weeks and I've seen others who can confirm this or at worst have already had damage to their cards.”

It transpired a mining process had been running alongside the ESEA client since April 14. It had  in total mined $3,602.21 worth of bitcoins for an unknown third party via users’ GPUs.

An update in the early hours of this morning removed any trace of the process from the ESEA client. An apologetic Thunberg, meanwhile, has pledged a free month of premium ESEA membership to current premium members, and destined any cash inadvertently made via the mining for the prize pool of ESEA’s upcoming European tournament season - “so at the very least your melted gpus contributed to a good cause”. 

“Once again, our bad,” concluded Thunberg. “Thanks for keeping us honest.” As of yet, there’s no talk of compensation for those customers who’ve suffered from failing PCs. 

Bitcoin miners are the workers that keep the peer-to-peer online economy afloat. They solve mathematical problems to acquire more coins, and are required as a third-party to approve bitcoin transactions. The more miners there are at any one time, the harder the problems become to solve.

Miners have often used their processors, GPUs or specially-designed hardware to solve their algorithms, entirely legitimately - but the system-intensive nature of these solutions means some hire contractors, and an unscrupulous few have incentive to farm these calculations out to unwary users via malware.

Login or Register
0
+0
-0
avatar

I just want to point out that many users experienced symptoms of the bitcoin mining (and posted for help in the forums) in the few days leading up to its exposure, but I was the one who actually uncovered the process that was running and posted screenshots - 100% proving that it was actually bitcoin mining. My post was actually deleted by an admin because it contained the process name and the arguments that were being passed into. My thread was locked by this admin and from there, other people confirmed what I found. I was also the one who made the recording with said admin.

0
+0
-0
Tim Edwards's picture
361

This is very not cool. 

Alienware - Game VictoriousNvidia Shield - Titanfall
Confessions of a botter: how one man won and lost $10,000 worth of Steam items

Team Fortress 2

Confessions of a botter: how one man won and lost $10,000 worth of Steam items

Scream Fortress has turned Team Fortress 2 into a urine-soaked carnival

Scream Fortress has turned Team Fortress 2 into a urine-soaked carnival

Valve to tackle

Valve to tackle "transparently unfair" distribution of Team Fortress 2 Halloween gifts

Past Team Fortress 2 Halloween events reactivated to warm you up for Scream Fortress 6

Past Team Fortress 2 Halloween events reactivated to warm you up for Scream Fortress 6

Team Fortress 2 now lets players treat themselves to an early Halloween

Team Fortress 2 now lets players treat themselves to an early Halloween

Valve fix Team Fortress 2's most powerful exploit: items_game.txt

Valve fix Team Fortress 2's most powerful exploit: items_game.txt

What is SteamPipe?

Team Fortress 2

What is SteamPipe?

Valve release annual Team Fortress 2 comic six months early

Valve release annual Team Fortress 2 comic six months early

Valve announce the 2014 Saxxy Award winners (they're all TF2 shorts)

Valve announce the 2014 Saxxy Award winners (they're all TF2 shorts)

The 2014 Saxxy Awards are live; will be the

The 2014 Saxxy Awards are live; will be the "biggest Saxxys yet"

Team Fortress 2's first community-made merchandise goes on sale

Team Fortress 2's first community-made merchandise goes on sale

Debut your artistic skills with Team Fortress 2 merchandise; royalties included

Debut your artistic skills with Team Fortress 2 merchandise; royalties included

Team Fortress 2 VR edition revealed: six rounds on Badwater with the Oculus Rift

Team Fortress 2

Team Fortress 2 VR edition revealed: six rounds on Badwater with the Oculus Rift

Valve launch new Team Fortress maps and Robot Destruction mode in 'Early Access'

Valve launch new Team Fortress maps and Robot Destruction mode in 'Early Access'

"Dance like no one's shooting at you": Team Fortress 2's Love and War update is live

You wait years for an official TF2 short and then a 15 minute film teleports in

You wait years for an official TF2 short and then a 15 minute film teleports in

Mystery Team Fortress 2 update incoming, initiate SUSPENSE

Mystery Team Fortress 2 update incoming, initiate SUSPENSE

Valve are still pushing updates for Counter-Strike: Source, Day of Defeat: Source, and Half-Life 2: Deathmatch

Valve are still pushing updates for Counter-Strike: Source, Day of Defeat: Source, and Half-Life 2: Deathmatch

If Linux is the future then the future is awful (or How To Install Linux Alongside Windows)

Team Fortress 2

If Linux is the future then the future is awful (or How To Install Linux Alongside Windows)

Team Fortress 2 update renders Quickplay more reliably quick and play-full

Team Fortress 2 update renders Quickplay more reliably quick and play-full

Team Fortress 2 and Dota 2 item makers earn average of $15,000 each

Team Fortress 2 and Dota 2 item makers earn average of $15,000 each

Dota 2 works on Steam controller but pro play is “not really the goal”

Dota 2 works on Steam controller but pro play is “not really the goal”

Saxxiest 2013 Team Fortress 2 Source Filmmakers announced: watch their work here

Saxxiest 2013 Team Fortress 2 Source Filmmakers announced: watch their work here

Necromedic: healing transcends death in Team Fortress 2's Mann vs Machine Two Cities update

Necromedic: healing transcends death in Team Fortress 2's Mann vs Machine Two Cities update