Cyber Risks · Cisco Talos

Years into these games’ histories, attackers are still creating “Fortnite” and “Roblox”-related scams

Summary: Cisco Talos reports that a central network of attackers is compromising legitimate domains, including some with .gov and .edu top-level domains, to trick Fortnite and Roblox players into sharing personal information or downloading malicious apps. Talos also notes that searching "Fortnite game" on the Google Play store surfaces apps of questionable origin, including one published by "EPic Games" with reviews that appear bot-written.

Key Takeaway: The campaign's use of .gov and .edu domains means the trust signals players and parents are taught to check no longer separate a legitimate site from a lure, and the real Fortnite is only available from the Epic Games Store.

Read the original at Cisco Talos ↗

Topics
Malware
Related