Take-Two is definitely not having a good time. Following the colossal escape of the weekend GTA Vits septimana horribilis continues with the fresh news that your 2K Games support services have been hackedand customers are now receiving phishing scams.
In a post on the official 2K Support Twitter account, 2K explained that their tech support platform had been hacked and that the attacker had taken a bunch of customer emails. He says he “became aware that an unauthorized third party illegally accessed the credentials of one of our vendors to the help desk platform that 2K uses to support our customers.”
The tweeted statement continues: “The unauthorized party sent a communication to certain players that contained a malicious link. Do not open any email or click on any link you receive from the 2K Games support account.” (Emphasis theirs.)
This is a pretty disastrous deal for 2K. Typically, when a network intrusion is detected, companies can identify that even if email addresses may have been accessed, they can ensure that passwords were bypassed and encrypted, and that no data was accessed. credit card information, and so on. But here, the attacker was clearly able to use 2K’s systems to contact customers from the official account, and as such bypass any of the usual spam filters or common sense nonsense detectors a person might have.
2K has taken its “support portal” offline while they try to figure out what the heck happened, which isn’t a great look, especially in the week of NBA 2K23‘s release. The statement says, “We will issue a notice when you can resume interacting with official 2K help desk emails,” which is…not a foolproof method. Firstly, it gives the impression that there might be a time when a previously unread phishing email would be safe to click on, and secondly, it hardly reaches people who’ve received the email, who aren’t fortunate enough to have noticed the tweet (or read the press coverage).
Meanwhile, those with open tickets are getting told, at the time of writing, that 2K doesn’t “have estimates on when you’ll receive a reply,” with the somewhat ironic suggestion that they, “stay tuned via email.”
Read More: NBA 2K23: The Kotaku Review
For those who think they’ve already fallen for the phishing scam, 2K recommends that people reset all passwords, enable multi-factor authentication (but avoid text message-based verification!), plug their PCs with antivirus software and “check your account settings to see if any forwarding rules have been added or changed in your personal email accounts.”
There is more cause for concern when you realize that a customer acknowledged that a hack had probably occurred about ten hours before the statement was issued, but it was cheated for the official account. the the original client replied nearly nine hours before the hack was confirmed, saying, “At this point, it’s very clear that you guys were hacked into support related stuff… please make a statement before the damage is too great.”
Many of the responses to the statement come from distraught customers who claim to have lost their accounts or seen money taken from their games. Many more are from people who clicked on links in emails, but now don’t know if they’ve done any damage to their device or account, and aren’t getting clear answers.
It appears that many of the phishing emails are signed by “Shikhar A” and contain a link to a .zip file, which purports to be a new version of 2K Launcher. It’s a safe bet to say you don’t want to download that, in case you received such an email.
We reached out to 2K to request more details about the attack and to ask why it took so long to send out the warning, but despite the potential usefulness of the responses to their customers, we were forcefully told, “We’re not going to comment beyond 2K posts on social media related to the matter.”
#GTA #Editors #Horrible #TakeTwo #Week #Worse #Disastrous #Trick