Feeds

Zombie apocalypse survivors frozen in terror by hacker raid

The War Z's horrific hash haemorrhage

Intelligent flash storage arrays

Controversial online zombie-blasting video game The War Z is on pause after hackers raided its forum and its database of players.

Publisher OP Productions has advised survivors - what it calls its 600,000 or so gamers - to change their passwords: the as-yet unidentified infiltrators of its computer systems accessed players' email addresses and obfuscated passwords, but not their banking card details for the pay-to-play shooter.

In a statement, the company said it has suspended the game and its forum for an unspecified period in order to carry out an investigation into the hack. It did not disclose the hashing algorithm used to "encrypt" the passwords nor whether the hashes were salted. It stated:

We are sorry to report that we have discovered that hackers gained access to our forum and game databases and the player data in those databases. We have launched a thorough investigation covering our entire system to determine the scope of the intrusion. This investigation is ongoing and is our top priority. As part of the remediation and security enhancement process we will be taking the game and forums down temporarily.

OP Productions called in external consultants to investigate the digital break-in, which it described as a "humbling experience". The games outfit also apologised for any inconvenience.

The War Z is a multiplayer zombie survival horror fest that has attracted criticism since its release in December.

Christopher Boyd (AKA Paperghost), an avid gamer and senior researcher for ThreatTrack Security, said the hack may have been carried out by a gamer who felt let down by OP Productions and wanted revenge.

"The War Z is itself a rather controversial title - it was pulled from [Valve's online software store] Steam a while ago due to allegations regarding its marketing and promotional claims of in-game features which didn't actually exist in the game," Boyd told El Reg.

"It's entirely possible that somebody felt short-changed amid the furore over the game and decided to take action into their own hands, especially as the game has recently reappeared on Steam. While it's a little odd that the developers don't collect names and addresses, that may be a blessing in disguise given the player data it seems the hackers had access to," he added.

A blog post by Boyd notes that screenshots showing what looks like compromised developer accounts spamming players in-game have been doing the rounds in the run-up to this week's announcement of a security breach. Boyd advises gamers to look for updates via the official Steam Community forum rather than the compromised The War Z forum. ®

Bootnote

Thanks to reader Vin K for forwarding OP Productions' statement on the data raid.

Security for virtualized datacentres

More from The Register

next story
MEN: For pity's sake SLEEP with LOTS of WOMEN - and avoid Prostate Cancer
And, um, don't sleep with other men. If that's what worries you
Voyager 1 now EIGHTEEN LIGHT HOURS from home
Almost 20 BEEELION kilometres from Sol
Jim Beam me up, Scotty! WHISKY from SPAAACE returns to Earth
They're insured for $1m, before you thirsty folks make plans
ROGUE SAIL BOAT blocks SPACE STATION PODULE blastoff
Er, we think our ISS launch beats your fishing expedition
Comet Siding Spring revealed as flying molehill
Hiding from this space pimple isn't going to do humanity's reputation any good
BAE points electromagnetic projectile at US Army
Railguns for 'Future fighting vehicle'
OK Google, do I have CANCER?
Company talks up pill that would spot developing tumors
LONG ARM of the SAUR: Brachially gifted dino bone conundrum solved
Deinocheirus mirificus was a bit of a knuckle dragger
prev story

Whitepapers

Why cloud backup?
Combining the latest advancements in disk-based backup with secure, integrated, cloud technologies offer organizations fast and assured recovery of their critical enterprise data.
Forging a new future with identity relationship management
Learn about ForgeRock's next generation IRM platform and how it is designed to empower CEOS's and enterprises to engage with consumers.
High Performance for All
While HPC is not new, it has traditionally been seen as a specialist area – is it now geared up to meet more mainstream requirements?
New hybrid storage solutions
Tackling data challenges through emerging hybrid storage solutions that enable optimum database performance whilst managing costs and increasingly large data stores.
Getting ahead of the compliance curve
Learn about new services that make it easy to discover and manage certificates across the enterprise and how to get ahead of the compliance curve.