FRESH

Hacker News

Home

Rainbow Six Siege hacked as players get billions of credits and random bans

280 points by erhuve

by butz

4 subcomments

Nice to see anti-cheats working and protecting Linux players from hacks, by preventing them from actually playing the game.

by petterroea

0 subcomment

Hard to have sympathy for Ubisoft the company as they are regularly used as an example of the most anti-consumer practices out there. But the whole situation is a mess, and if anything, it is probably the consumers that will end up suffering the most for this.

by dvh

5 subcomments

It's not random bans, the nicknames are words from longer text. It's lyrics from Shaggy - It wasn't me.

by navigate8310

3 subcomments

It's a shame this game has to pander to eSports fanatics rendering it into a completely hollowed out soulless experience. From the early days of Operation Chimera to selling half of your stake and IPs to Tencent, Ubisoft has seen it all.

by Scaevolus

10 subcomments

https://x.com/vxunderground/status/2005008887234048091
Here's the word on the internet streets:
- THE FIRST GROUP of individuals exploited a Rainbow 6 Siege service allowing them ban players, modify inventory, etc. These individuals did not touch user data (unsure if they even could). They gifted roughly $339,960,000,000,000 worth of in-game currency to players. Ubisoft will perform a roll back to undo the damages. They're probably annoyed. I cannot go into full details at this time how it was achieved.
- A SECOND GROUP of individuals, unrelated to the FIRST GROUP of individuals, exploited a MongoDB instance from Ubisoft, using MongoBleed, which allowed them (in some capacity) to pivot to an internal Git repository. They exfiltrated a large portion of Ubisoft's internal source code. They assert it is data from the 90's - present, including software development kits, multiplayer services, etc. I have medium to high confidence this true. I've confirmed this with multiple parties.
- A THIRD GROUP of individuals claim to have compromised Ubisoft and exfiltrated user data by exploiting MongoDB via MongoBleed. This group is trying to extort Ubisoft. They have a name for their extortion group and are active on Telegram. However, I have been unable to determine the validity of their claims.
- A FOURTH GROUP of individuals assert the SECOND group of individuals are LYING and state the SECOND GROUP has had access to the Ubisoft internal source code for awhile. However, they state the SECOND GROUP is trying to hide behind the FIRST GROUP to masquerade as them and give them a reason to leak the source code in totality. The FIRST GROUP and FOURTH GROUP is frustrated by this
Will the SECOND GROUP leak the source code? Is the SECOND GROUP telling the truth? Did the SECOND GROUP lie and have access to Ubisoft code this whole time? Was it MongoBleed? Will the FIRST GROUP get pinned for this? Who is this mysterious THIRD GROUP? Is this group related to any of the other groups?

by runtimepanic

0 subcomment

This is the nightmare scenario for live-service games: once the integrity of progression and bans is compromised, trust evaporates fast. Rolling back “billions of credits” is easy compared to undoing random bans.

by MattDaEskimo

1 subcomments

My heart goes out to the devs forced to return to work to solve these issues. Numerous groups claiming numerous exploits - mostly MongoBleed.
One has to wonder: why didn't anyone anticipate this happening? Surely the moment this exploit was discovered the team would've locked it down immediately?

by miohtama

0 subcomment

It is Mongo
https://x.com/vxunderground/status/2005008887234048091?s=20

by mlacks

0 subcomment

It appears to be from the mongo db exploit. Sort of like Heartbleed from a few years ago.
https://github.com/joe-desimone/mongobleed
https://beta.shodan.io/host/212.104.194.153

by pjmlp

0 subcomment

This is why security actually matters in game development.

by jay_kyburz

1 subcomments

I wonder if they could push out an update. That would be super scary.

by Surac

0 subcomment

Ubislop, Ubislop never changes. Never trust a Ubislop

by kjkjadksj

0 subcomment

I remember when gta5 was getting hacked left and right when it was released. People would just hand you millions in in game currency and you’d get to unlock all the hypercars and military vehicles. Really made the game fun removing the grind and pay to win and allowing everyone to do anything. And it gave people a chance if someone was dominating a lobby with something broken or overpowered to actually fight back fire with fire.

by luxuryballs

0 subcomment

Rainbowhood

by rldjbpin

0 subcomment

poured way too many hours into this game long back before it became too painful to play. this almost made me go back and check on the madness but unfortunately the servers are taken offline.
while i don't agree with how devs and the publisher works on community feedback, it is still miles better than what EA does. not that it is a high bar to clear.

by SAMUKE34

0 subcomment

[dead]

by 476392647282

2 subcomments

[dead]

by sammy2255

0 subcomment

[flagged]

by prmoustache

0 subcomment

"That wording has been met with heavy backlash from players, many of whom believe Ubisoft is attempting to downplay the severity of the situation."
Come on it is just a game (◔_◔)

by lysace

6 subcomments

A 9 year old random FPS game.
WTF happened to non-shooter games? I am so bored of these FPS variations.