Feeds

Zombie apocalypse survivors frozen in terror by hacker raid

The War Z's horrific hash haemorrhage

Build a business case: developing custom apps

Controversial online zombie-blasting video game The War Z is on pause after hackers raided its forum and its database of players.

Publisher OP Productions has advised survivors - what it calls its 600,000 or so gamers - to change their passwords: the as-yet unidentified infiltrators of its computer systems accessed players' email addresses and obfuscated passwords, but not their banking card details for the pay-to-play shooter.

In a statement, the company said it has suspended the game and its forum for an unspecified period in order to carry out an investigation into the hack. It did not disclose the hashing algorithm used to "encrypt" the passwords nor whether the hashes were salted. It stated:

We are sorry to report that we have discovered that hackers gained access to our forum and game databases and the player data in those databases. We have launched a thorough investigation covering our entire system to determine the scope of the intrusion. This investigation is ongoing and is our top priority. As part of the remediation and security enhancement process we will be taking the game and forums down temporarily.

OP Productions called in external consultants to investigate the digital break-in, which it described as a "humbling experience". The games outfit also apologised for any inconvenience.

The War Z is a multiplayer zombie survival horror fest that has attracted criticism since its release in December.

Christopher Boyd (AKA Paperghost), an avid gamer and senior researcher for ThreatTrack Security, said the hack may have been carried out by a gamer who felt let down by OP Productions and wanted revenge.

"The War Z is itself a rather controversial title - it was pulled from [Valve's online software store] Steam a while ago due to allegations regarding its marketing and promotional claims of in-game features which didn't actually exist in the game," Boyd told El Reg.

"It's entirely possible that somebody felt short-changed amid the furore over the game and decided to take action into their own hands, especially as the game has recently reappeared on Steam. While it's a little odd that the developers don't collect names and addresses, that may be a blessing in disguise given the player data it seems the hackers had access to," he added.

A blog post by Boyd notes that screenshots showing what looks like compromised developer accounts spamming players in-game have been doing the rounds in the run-up to this week's announcement of a security breach. Boyd advises gamers to look for updates via the official Steam Community forum rather than the compromised The War Z forum. ®

Bootnote

Thanks to reader Vin K for forwarding OP Productions' statement on the data raid.

Boost IT visibility and business value

More from The Register

next story
Just TWO climate committee MPs contradict IPCC: The two with SCIENCE degrees
'Greenhouse effect is real, but as for the rest of it ...'
Asteroid's DINO KILLING SPREE just bad luck – boffins
Sauricide WASN'T inevitable, reckon scientists
Brit amateur payload set to complete full circle around PLANET EARTH
Ultralight solar radio tracker in glorious 25,000km almost-space odyssey
Boffins spot weirder quantum capers as neutrons take the high road, spin takes the low
Cheshire cat effect see neutrons and their properties walk different paths
NASA Mars rover FINALLY equals 1973 Soviet benchmark
Yet to surpass ancient Greek one, however
Famous 'Dish' radio telescope to be emptied in budget crisis: CSIRO
Radio astronomy suffering to protect Square Kilometre Array
prev story

Whitepapers

Implementing global e-invoicing with guaranteed legal certainty
Explaining the role local tax compliance plays in successful supply chain management and e-business and how leading global brands are addressing this.
Boost IT visibility and business value
How building a great service catalog relieves pressure points and demonstrates the value of IT service management.
Why and how to choose the right cloud vendor
The benefits of cloud-based storage in your processes. Eliminate onsite, disk-based backup and archiving in favor of cloud-based data protection.
The Essential Guide to IT Transformation
ServiceNow discusses three IT transformations that can help CIO's automate IT services to transform IT and the enterprise.
Maximize storage efficiency across the enterprise
The HP StoreOnce backup solution offers highly flexible, centrally managed, and highly efficient data protection for any enterprise.