Freelance Design News | Backdoor For Malware Discovered In Some Ubisoft Games [Updates]

Backdoor For Malware Discovered In Some Ubisoft Games [Updates]

Compare Cost: Get 8 Free E-Commerce Design Bids

Service:
Location:

Budget:
Deadline:

Compare:

Web Design Calculator | Web Design Cost Guidelines

Exploitable code has been discovered in a browser-plugin installed by some Ubisoft games as part of the Uplay service. The exploit allows malicious websites to remotely install software on a compromised PC without the user’s knowledge.

The exploit is accomplished by tricking the Uplay browser plugin into thinking that a given link contains legitimate Uplay code. In theory, this backdoor could be used to infect a computer with any malware desired. There’s no sign of a patch yet, so users need to look out!

Worse still, users who are vulnerable to this exploit may not even know a browser plug-in is installed. I personally fall into this category. Several days ago I installed a copy of Ghost Recon: Future Soldier. Ubisoft did not inform me that it had added a plug-in to my browser, so I was surprised to find that the vulnerable plug-in was installed.

The plug-in appears to install in all major browsers including Opera. You’ll need to go into your browser’s options to find and delete it. It always includes “Uplay” in its title, so it’s at least easy to find. Only Ubisoft games that require the Uplay service have this problem.

So far, there have not been any reported instances of the exploit being used in the wild. The discovery was publicized on Hacker News and has since been widely reported, so attempts to utilize it seem likely. Ubisoft has made an official announcement that informs players how they can fix the exploit.

Source: Rock, Paper, Shotgun

Source http://www.makeuseof.com/?p=116414
Tue, 31 Jul 2012 03:30:31 GMT
Tags: malware, News, security, security tips,

malware

FBI Pulls The Plug On DNSChanger Network, Infected PCs Lose Internet Access [Updates]

On March 9th, 2012 at 12:01am the FBI finally pulled the plug on a set of rogue DNS servers used by the trojan known as DNSChanger, potentially leaving hundreds of thousands without access to the Internet. The malware has kept itself in the headlines bec

8 Ways To Make Sure A Link Is Safe Before You Click It

Hyperlinks as we all know are the strands that make up the web. But just like the spiders, the digital web can trap the unsuspecting. Even the more knowledgeable among us click on links which are potentially harmful. You really cannot control you clicking

News

Facebook App For iPad Gains Retina Display Support [Updates]

Owners of the new iPad have just gained full Retina display support for one of its more important apps – Facebook. Most users will see a distinctly better picture using their iPad with the new display. While the iPad 3 does a good job of scaling apps that

Up To 1.5 Million Credit Card Numbers Stolen From Global Payments [Updates]

This weekend was scary for 1.5 million Visa and Mastercard account holders who may have had their card numbers stolen from Global Payments. They first announced the theft late Friday night and said that although the credit card numbers may have been compr

Tumblr Now Integrates With Facebook Timeline, News Feed & Ticker [Updates]

The Tumblr-Facebook relationship just got tighter with a new Facebook integration update on Tumblr. Tumblr is now an official Open Graph Facebook partner, which means that your Tumblr posts, comments and likes will appear on your Timeline, News Feed and T

security

Who are you sharing your customer data with?

I see new products and services from large retailers and large online companies all the time. Sometimes these services can be extremely helpful to the ecommerce website owners. Services such as product reviews, facebook or social media widgets, customer f

Android App Unveils Loopholes In Permissions [Updates]

A new “No Permissions” application from Leviathan Security illustrates how easily Android applications can bypass user permissions. In a perfect world, Android’s permissions system would help users make informed decisions about the apps they i