Malware in Fragpunk. Malicious code and RCE vulnerabilities.

[Tighty-Whitey]

This discussion is published to raise awareness around the players of Fragpunk to warn them of potential risks and vulnerabitilies that the game may possess due to recent developments in the industry, as well as evaluation of the recent studio related information.

Recent research suggests that the main studio that owns development studio of Fragpunk "Bad Guitar Studios" – NetEase based in China, has numerous vulnerabilities, malware and potential RCE (Remote Code Execution) planted within the game. Their recent game, developed by that studio itself – Marvel Rivals has been a subject of numerous scandals regarding unfixed remote code execution and how dangerous the nature of such vulnerabilities can be, as that way they are able to remotely execute code and take unauthorized access to someone’s PC. It’s not the first time something like this has happened. Unlike NetEase and such studios, Steam and Valve can be forthcoming to fixing such issues via HackerOne[www.hackerone.com] where users who found potential vulnerabilities are reporting them directly to Valve, however, when it comes more narrow products published on Steam by other studios, some things slip through quite easily.

https://www.pcgamer.com/games/third-person-shooter/a-marvel-rivals-player-has-uncovered-one-of-the-most-dangerous-vulnerabilities-a-game-can-have-thatll-let-cheaters-take-over-your-pc-and-find-your-passwords/

Such vulnerabilities aren’t always oversights. Some of them may intentionally target user’s computers or private information to then sell that information. Videogames may easily be used against players, desperately marketed through propaganda as we’ve discussed in another discussion with a purpose to get as much data, information from users computers as possible. How does NetEase sustain its high budget, how does it receive revenue? There aren’t that many microtransactions in Marvel Rivals, but they have to somehow cover the costs to development of such games. Data that the studios are able to sell may as well be the answer. Not everybody is willing to spend their money on a free game and with a free-to-play model there is always a risk.

https://shalzuth.com/Blog/IFoundAGameExploit

On top of that, despite minimalistic and dated graphics in Marvel Rivals, the game performs very poorly. Some have suspected that the game may have some sort of a «miner» to farm bitcoins while players are unaware, as developers need to receive revenue from players somehow. Valve are trying their best to maintain business in all places, but under such difficult circumstances they might look past that, avoid looking into it to not ruin the relationship between them or might as well be partnered. Still, the vulnerabilities have been discovered and Fragpunk, because it is owned by the same studio, may easily have such vulnerabilities and practices in place. This is why you should think twice before playing the game and stay extremely cautious, research important information to evaluate potential risks before playing games.

While Steam is still a very safe place to get games from, in those rare occurrences we would see practices like this in many games.

Only recently there was a fake game on Steam called «PirateFi» that contained malware. It was quickly taken care of and pulled from Steam:

https://www.youtube.com/watch?v=MJGMzYSoWLc

Practices of malware development, of coding have advanced enough for certain studios to be able to insert those things into games and it is important to raise awareness of players regarding those matters. Fragpunk is not a safe game to play for established reasons due to the practices of the studio behind the game and we cannot possibly count on those tendencies to shift soon at the time of writing.

However, some things may happen sooner than expected. Things change and have a possibility of getting «nudged» to a specific direction where things will change, but at a high cost. Time’s come? Learn what’s at stake in the industry and the risks the studios, gaming industries and industries overall have in the modern times:

Disruption of the gaming industry and how the crisis affects major industries

Falsely advertised game and detrimental marketing practices

https://www.youtube.com/watch?v=U-if7Zxz0NA

[PHATASMA]

Reported for spam

[Booyah]

Opprinnelig skrevet av PHATASMA:

Reported for spam

Yeah you're talking about the video game too much in the forum designed for talking about the video game. You're supposed to only talk about it a little bit

[PHATASMA]

Opprinnelig skrevet av 🎀Booyah🎀:

Opprinnelig skrevet av PHATASMA:

Reported for spam

Yeah you're talking about the video game too much in the forum designed for talking about the video game. You're supposed to only talk about it a little bit

Except he's not talking about the game, he's talking about the Chinese publisher. This person has made 3 other posts along with it.

Just because you passively encourage these type of posts, doesn't mean others need to as well.

[Booyah]

Opprinnelig skrevet av PHATASMA:

Opprinnelig skrevet av 🎀Booyah🎀:

Yeah you're talking about the video game too much in the forum designed for talking about the video game. You're supposed to only talk about it a little bit

Except he's not talking about the game, he's talking about the Chinese publisher. This person has made 3 other posts along with it.

Just because you passively encourage these type of posts, doesn't mean others need to as well.

Of course, but just because you don't like it doesn't make it spam. But you bring a good point

Are we allowed to talk about the developer or publisher of a game on the discussion forum for the game itself? Or is that considered Off-Topic? I'm leaning on-topic, but I could be wrong. Definitely doesn't strike me as spam either way. I feel like spam usually means repeating content, not just quantity. But repeating content related to the topic itself is expected on a forum for the topic, right?

[PHATASMA]

Opprinnelig skrevet av 🎀Booyah🎀:

I feel like spam usually means repeating content, not just quantity.

He's literally made the same posts, worded differently, 4 times in total.

EDIT: It's actually 5 times, and they're all within a handful of hours from each other.

[Booyah]

Opprinnelig skrevet av PHATASMA:

Opprinnelig skrevet av 🎀Booyah🎀:

I feel like spam usually means repeating content, not just quantity.

He's literally made the same posts, worded differently, 4 times in total.

EDIT: It's actually 5 times, and they're all within a handful of hours from each other.

Can you provide an example of how it's "the same post, worded differently"?

[☭ Comunista Vegano ★]

My ESET Smart Security Premium detected a file from the game as suspicious. So I searched for something on the forum and found this.

[sanbait]

game is hack!

[Sic.bn]

banned, LOL

[Андрей в говне]

Since there are already so many of us, I hope Steam will put an end to this Chinese expansion. I am very glad that I am not the only one speaking on of NetEase and that I suspect it of fraud.

[Chesmond]

Opprinnelig skrevet av Sic.bn:

banned, LOL

he was banned for telling the truth xD

[Hotklou]

Opprinnelig skrevet av Chesmond:

Opprinnelig skrevet av Sic.bn:

banned, LOL

he was banned for telling the truth xD

Just look at Tighty-Whitey's post history. He's a troll, and he doesn't even try to hide it. I wouldn't trust any claims he makes.

[Booyah]

Opprinnelig skrevet av Hotklou:

Opprinnelig skrevet av Chesmond:

he was banned for telling the truth xD

Just look at Tighty-Whitey's post history. He's a troll, and he doesn't even try to hide it. I wouldn't trust any claims he makes.

Then WHY are you still bumping his thread?

[KIM]

jjHkBCBMXN

[Booyah]

Opprinnelig skrevet av NeedMorePower:

Opprinnelig skrevet av 🎀Booyah🎀:

Then WHY are you still bumping his thread?

Reporting you too for supporting his madness

Reporting you for also supporting it