Fortnite Login Flaw Left Millions Of Players Exposed To Hackers. 

Cyber security firm Check Point discovered the vulnerability, which allowed people to steal the login credentials of Fortnite players without them even knowing about it.

For the attack to be successful, all the victim would have to do is click on a link shared via a chatbox on Fortnite or through social media. Once clicked, the hacker could gain access to a player's username, password, V-bucks currency and any data stored on their account – without the victim even having to enter their login credentials.

The head of the Check Point research team believes it is entirely possible that these flaws could have already been exploited by hackers, despite no reported instances of attackers making use of the exploit.

This is because the method of intercepting the authentication credentials left very little trace. Before publishing the research the Check Point researchers contacted Fortnite developer Epic Games and the vulnerabilty has since been fixed.

With more than 80 million players worldwide, Fortnite has become a popular target for cyber criminals over the last year. 

Previous attacks have involved links offering free V-bucks that actually spread malware, as well as fake Android apps claiming to be the game itself.

The latest discovery was far more sophisticated and sinister, according to Check Point, and provided the ability for a "massive invasion of privacy."

The researchers concluded their report: "The underlying takeaway... is to always be vigilant when receiving links send from unknown sources. After all, for the attack to be successful many phishing attacks do not require any further action from the user other than clicking on the link."

https://www.independent.co.uk/life-style/gadgets-and-tech/gaming/fortnite-login-epic-games-cyber-security-check-point-gaming-a8730371.html