×

Dark Web Creating ‘Thriving Criminal Eco-System’ Around Game

Criminals are turning to video game mega-hit “Fortnite” and its 200 million players as an easy way to launder cash from stolen credit cards, according to cyber intelligence firm SixGill.

“‘Fortnite’s’ format and popularity have drawn the attention of cybercriminals, and resulted in a thriving criminal eco-system around the game,” according to a report by the company. “As the game’s popularity increases and the financial system around it becomes more diverse, fraud involving games such as ‘Fortnite’ is likely to become more prevalent.”

Reached for comment Tuesday, Epic Games said it continues to combat fraud in its games.

Epic Games takes these issues seriously, as chargebacks and fraud put our players and our business at risk. As always, we encourage players to protect their accounts by turning on two-factor authentication, not re-using passwords and using strong passwords, and not sharing account information with others.”

In a report entitled “Carding and the Digital Gaming Industry,” SixGill lays out the process that criminals use to turn stolen credit cards into cash with the help of Epic Games’ “Fortnite.”

A criminal creates a new free account for “Fortnite,” and then uses a stolen credit card, or several stolen credit cards, to stack the account with “Fortnite’s” in-game currency and purchasable skins. Once the account is loaded up, they turn to third-party sites like eBay and G2G to list the accounts at prices that amount to a fraction of their worth based on the items and virtual currency they have. So, for instance, an account loaded up with $100 worth of V-Bucks might sell for $25.

The seller typically requires bank transfers through services like PayPal, and once the money has changed hands, the account is handed over, along with the email account and password, to the buyer.

In the past sixty days alone, just the top 50 “Fortnite” items listed on eBay brought in about $250,000, according to the report. A quick search this week on eBay shows that “Fortnite” accounts are a hot commodity on the website, with accounts selling for anywhere from the hundreds to thousands of dollars in the past month. There are also options to buy a “ticket” to a raffle for an account, where hundreds of people pay a few dollars for a chance to win a loaded account.

“With the recent surge in the popularity of ‘Fortnite,’ an online game boasting more than 125 million players and monthly revenues in the hundreds of millions of dollars, cybercriminals have flocked to this massively successful game and begun exploiting it to commit financial fraud,” according to the SixGill report.

Carding — the act of using a stolen credit card to purchase items in a game and resell them at a discount — isn’t unique to “Fortnite.”  But Benjamin Preminger, cyber threat intelligence specialist at SixGill tells Variety that “Fortnite” offers would be criminals an enticing target.

“Fortnite assumes its place in the gaming fraud hall of fame for a number of reasons,” Preminger said. “‘Fortnite’ is breaking records in its popularity. The game’s user base, hundreds of millions strong, seems to be extremely diverse in terms of age, gender, socio-economic status, and country of origin. This mass market appeal gives cybercriminals the opportunity to target a host of different victims, from young children with access to their parents’ credit cards to older adults with little awareness of the potential dangers of cybercrime. As more and more people enter the ‘Fortnite’ Battle Royale arena and purchase in-game items, the more opportunity cybercriminals have to hack user accounts and run away with the virtual booty.

“Additionally, the seasonality of Fortnite, adding new artifacts and other in-game items every few months, has increased market demand for rare, time-limited in-game items. This feature, created by Epic Games to keep the game fresh and interesting, has unwittingly created a dark web market for unique and highly sought-after Fortnite goods.”

Finally, Preminger said, “Fortnite’s” surge in popularity coincided with the rise of cryptocurrency.

“The surge in cryptocurrencies’ popularity opened up new possibilities for anonymous, lightning-speed global money transfers, and enabled cybercriminals to more easily convert V-bucks, to cryptocurrency, and ultimately to cold hard cash.”

Buying and selling accounts on “Fortnite” is against the game’s end-user license, which means that Epic Games can and will close accounts that have been purchased or sold, but they have to catch them first.

And Preminger said there’s no indication that it’s having a noticeable impact on the practice of carding in “Fortnite.”

“Cybercriminal activity surrounding ‘Fortnite’ seems to only be growing, with little sign of slowing down,” Preminger said. “Analysis of dark web conversations regarding ‘Fortnite’-related credit card fraud suggests that while some exploited cards are shut down, the use of VPN servers and other deception mechanisms allows cybercriminals to continue in their nefarious endeavors, with little intervention on the part of Epic Games or law enforcement agencies. We don’t have information regarding the time it takes for compromised accounts to be banned, but as examples from the dark web show, cybercriminals are finding it easy to exploit the vulnerabilities and victims of ‘Fortnite.'”

The issue of selling entire accounts could become moot if and when Epic Games permanently rolls out gifting items in the game. The gifting ability could create a grey market for in-game items without the need to buy and sell entire accounts. Players could simply gift an item that was purchased offline using another service. Epic Games tested the ability in December, but haven’t commented since on when it will returning to the game.

More Gaming

  • Tim Schafer14th British Academy Games Awards,

    Double Fine Next Game After 'Psychonauts 2' Likely a 'Not Sequel'

    Tim Schafer isn’t yet talking about what game will come next for Double Fine Productions following the release of “Psychonauts 2,” but he has some general ideas. “We’re doing a sequel right now and I have an urge to make a not sequel,” he told Variety during a recent interview. The problem, he went on, [...]

  • Paradox Interactive Had Its 'Best Year

    Paradox Interactive Had Its 'Best Year to Date' in 2018

    Video game publisher Paradox Interactive just had its “best year to date,” CEO Ebba Ljungerud said during a financial results report on Tuesday. The company had its best income quarter in Q4 2018, despite not releasing any new games during that time. Revenues increased 51% to 336.9 million SEK (about $36 million USD) compared to [...]

  • 'PUBG Mobile' x 'Resident Evil 2'

    'PUBG Mobile' x 'Resident Evil 2' Debut 'Zombie: Survive Till Dawn' Crossover Event

    “Resident Evil 2” meets “PUBG Mobile” with the portable battle royale’s new gameplay mode “Zombie: Survive Till Dawn,” available now. The new collaboration between the mobile iteration of “PUBG” and the survival horror hit “Resident Evil 2” launched on Tuesday, featuring three days and two nights of in-game time all rolled up into one 30-minute [...]

  • ELeague - street-fighter-v

    'Street Fighter V's' Next Opponent Is … 'Puzzle & Dragons'

    “Street Fighter V: Arcade Edition” has a new opponent — the popular match-3 puzzle game “Puzzle & Dragons,” developer GungHo Online Entertainment announced on Monday. The Street Fighter V: Arcade Edition Collab is already underway and ends on March 3. During this time, players can make their way through three brand new “Puzzle & Dragons” [...]

  • Fortnite Battle Royale

    Epic Games Suing Organizers of Disastrous 'Fortnite' Festival

    Epic Games is suing the organizers behind a U.K. “Fortnite” festival that happened over the weekend, according to Epic Games. Fortnite Live Norwich was billed as the “Fortnite” event of the year. The two-day festival advertised outdoor laser tag, a climbing wall, archery, and more. Tickets started at £12, with wristbands for unlimited access going [...]

  • Google Hosts GDC Keynote in Which

    Google Hosting GDC Keynote in Which 'All Will be Revealed'

    Google is hosting a keynote at this year’s Game Developers Conference that promises to reveal all, according to an invite sent out to press including Variety. While Google has been attending GDC and hosting events at the annual gathering since at least 2010, this appears to be the first time the company is holding a [...]

  • 'Fortnite' Usurped by 'PUBG Mobile' in

    'Fortnite' on App Store Usurped by 'PUBG Mobile' in January

    Player spending in “PUBG Mobile” overtook the amount spent in the iOS version of “Fortnite” last month for the first time, according to Sensor Tower. Global spending in “PUBG Mobile” was up 24% from December, with players spending an estimated $45.2 million on the App Store and Google Play versions of the game. “Fortnite” on [...]

More From Our Brands

Access exclusive content