A Source Engine exploit allowed hackers to take over your PC by killing you

Team Fortress 2

We all know to not open spam emails that claim you’ve inherited millions because your great uncle died in a rock climbing expedition in the Himalayas, but hackers are coming up with more sophisticated ways to take control of your PC and dig out your personal details. 

Here’s a hack for you. A life hack, that is. Read our list of the best PC games and you'll know what the best games are. No worries. 

Hackers recently targeted a vulnerability in Valve’s Source Engine that allowed them to load malicious code into custom games in anything from CS:GO to Team Fortress 2, as reported by OneUpSecurity, via Motherboard

Custom assets could be loaded into the game and then subsequently downloaded by users who unwittingly play the custom games used to scam people. In one specific case, the virus was loaded into a ragdoll animation that triggers upon death. Basically, when the hackers killed you, they could take over your computer. 

"As videogames are common inside employee break rooms and homes of employees, exploitation of a vulnerability could be used in a targeted attack to jump the air gap to a private network," Justin Taft, the researcher who discovered the virus, explains. "Additionally, discovering a remote code execution vulnerability in a popular videogame can be used to quickly create a botnet or spread ransomware."

Luckily, Valve were quick on the uptake and immediately patched the bug. That means you’re safe to be bad at videogames once more. 

Paladins
Sign in to Commentlogin to comment
Gapi csgoatse.com csgowitch.com avatarSkankwOn avatarWhiteCrow avatarGen avatar
Gapi csgoatse.com csgowitch.com Avatar
1
Gapi csgoatse.com csgowitch.com(11 days 20 hours played)
4 Weeks ago

ohhh shit dawg

1
SkankwOn Avatar
91
3 Weeks ago

This explains that mysterious Portal 2 update earlier in the week then.

1
WhiteCrow Avatar
370
WhiteCrow(7 hours played)
3 Weeks ago

As it is true for any software, Steam, VAC, and Valve's games are not bulletproof, but they would have you believe so. If you've somehow lost your account, or received a ban on it during this exploit, good luck getting it removed or reinstated.

1
Gen Avatar
5
3 Weeks ago

Absolutely, because there is no known way you could have lost your account due to this exploit.

Just because an attacker can compromise your computer doesn't mean he automagically compromises Valve's. If he hijacks your account you just call them and get it recovered.

1