×

Dark Web Creating ‘Thriving Criminal Eco-System’ Around Game

Criminals are turning to video game mega-hit “Fortnite” and its 200 million players as an easy way to launder cash from stolen credit cards, according to cyber intelligence firm SixGill.

“‘Fortnite’s’ format and popularity have drawn the attention of cybercriminals, and resulted in a thriving criminal eco-system around the game,” according to a report by the company. “As the game’s popularity increases and the financial system around it becomes more diverse, fraud involving games such as ‘Fortnite’ is likely to become more prevalent.”

Reached for comment Tuesday, Epic Games said it continues to combat fraud in its games.

Epic Games takes these issues seriously, as chargebacks and fraud put our players and our business at risk. As always, we encourage players to protect their accounts by turning on two-factor authentication, not re-using passwords and using strong passwords, and not sharing account information with others.”

In a report entitled “Carding and the Digital Gaming Industry,” SixGill lays out the process that criminals use to turn stolen credit cards into cash with the help of Epic Games’ “Fortnite.”

A criminal creates a new free account for “Fortnite,” and then uses a stolen credit card, or several stolen credit cards, to stack the account with “Fortnite’s” in-game currency and purchasable skins. Once the account is loaded up, they turn to third-party sites like eBay and G2G to list the accounts at prices that amount to a fraction of their worth based on the items and virtual currency they have. So, for instance, an account loaded up with $100 worth of V-Bucks might sell for $25.

The seller typically requires bank transfers through services like PayPal, and once the money has changed hands, the account is handed over, along with the email account and password, to the buyer.

In the past sixty days alone, just the top 50 “Fortnite” items listed on eBay brought in about $250,000, according to the report. A quick search this week on eBay shows that “Fortnite” accounts are a hot commodity on the website, with accounts selling for anywhere from the hundreds to thousands of dollars in the past month. There are also options to buy a “ticket” to a raffle for an account, where hundreds of people pay a few dollars for a chance to win a loaded account.

“With the recent surge in the popularity of ‘Fortnite,’ an online game boasting more than 125 million players and monthly revenues in the hundreds of millions of dollars, cybercriminals have flocked to this massively successful game and begun exploiting it to commit financial fraud,” according to the SixGill report.

Carding — the act of using a stolen credit card to purchase items in a game and resell them at a discount — isn’t unique to “Fortnite.”  But Benjamin Preminger, cyber threat intelligence specialist at SixGill tells Variety that “Fortnite” offers would be criminals an enticing target.

“Fortnite assumes its place in the gaming fraud hall of fame for a number of reasons,” Preminger said. “‘Fortnite’ is breaking records in its popularity. The game’s user base, hundreds of millions strong, seems to be extremely diverse in terms of age, gender, socio-economic status, and country of origin. This mass market appeal gives cybercriminals the opportunity to target a host of different victims, from young children with access to their parents’ credit cards to older adults with little awareness of the potential dangers of cybercrime. As more and more people enter the ‘Fortnite’ Battle Royale arena and purchase in-game items, the more opportunity cybercriminals have to hack user accounts and run away with the virtual booty.

“Additionally, the seasonality of Fortnite, adding new artifacts and other in-game items every few months, has increased market demand for rare, time-limited in-game items. This feature, created by Epic Games to keep the game fresh and interesting, has unwittingly created a dark web market for unique and highly sought-after Fortnite goods.”

Finally, Preminger said, “Fortnite’s” surge in popularity coincided with the rise of cryptocurrency.

“The surge in cryptocurrencies’ popularity opened up new possibilities for anonymous, lightning-speed global money transfers, and enabled cybercriminals to more easily convert V-bucks, to cryptocurrency, and ultimately to cold hard cash.”

Buying and selling accounts on “Fortnite” is against the game’s end-user license, which means that Epic Games can and will close accounts that have been purchased or sold, but they have to catch them first.

And Preminger said there’s no indication that it’s having a noticeable impact on the practice of carding in “Fortnite.”

“Cybercriminal activity surrounding ‘Fortnite’ seems to only be growing, with little sign of slowing down,” Preminger said. “Analysis of dark web conversations regarding ‘Fortnite’-related credit card fraud suggests that while some exploited cards are shut down, the use of VPN servers and other deception mechanisms allows cybercriminals to continue in their nefarious endeavors, with little intervention on the part of Epic Games or law enforcement agencies. We don’t have information regarding the time it takes for compromised accounts to be banned, but as examples from the dark web show, cybercriminals are finding it easy to exploit the vulnerabilities and victims of ‘Fortnite.'”

The issue of selling entire accounts could become moot if and when Epic Games permanently rolls out gifting items in the game. The gifting ability could create a grey market for in-game items without the need to buy and sell entire accounts. Players could simply gift an item that was purchased offline using another service. Epic Games tested the ability in December, but haven’t commented since on when it will returning to the game.

Popular on Variety

More Gaming

  • Google Stadia Game Streaming Service Launching

    Google’s Stadia Game Streaming Service Will Launch Nov. 19

    Google hardware chief Rick Osterloh gave us an update on the company’s game streaming service Stadia during the company’s fall hardware event in New York Tuesday: Stadia will be available to the public on Nov. 19. Stadia promises to stream games directly from the cloud, with no need to buy a full-blown game console. Consumers [...]

  • Fortnite Chapter 2

    'Fortnite' Emerges From Black Hole With All-New Island in Chapter 2

    After its previous world was sucked into a black hole, “Fortnite” is back — with an all-new island featuring a map with 13 different locations. The latest installment of the free-to-play battle royale game, which publisher Epic Games calls the first season of “Fortnite” Chapter 2, went live early Tuesday at around 6 a.m. ET. [...]

  • Fortnite-Season-X-Out-of-Time

    'Fortnite' Goes Dark: A Masterful Marketing Stroke by Epic Games

    On Sunday, “Fortnite” — the most popular game on Earth right now — without warning, imploded into darkness. At around 2 p.m. ET on Oct. 13, a meteor in Season 10 of “Fortnite” that had been biding its time set off a cataclysmic chain reaction that sucked up everything on the the island and eventually [...]

  • Hearthstone video game

    Blizzard Reinstates Hong Kong Gamer's Prize but Reaffirms Censure of His Speech

    Major U.S. gaming firm Blizzard Entertainment has reduced its punishment for a professional gamer who shouted a slogan in support of Hong Kong’s pro-democracy protests. But the company doubled down on its verdict about the inappropriateness of his conduct. In a Chinese language-only message on its official social media, Blizzard stated that it would “resolutely [...]

  • Activision Blizzard

    Activision Blizzard Stock Recovers From Hong Kong Fallout

    Activision Blizzard saw its stock recover Friday despite continued backlash over its decision to punish a “Hearthstone” player for publicly siding with Hong Kong’s pro-democracy protesters. The company’s share price was up more than 2% Friday, closing at $54.82. Activision had been in the spotlight ever since Ng Wai Chung, a player of its “Hearthstone” [...]

  • Mixer Co-Founders Leave Microsoft's Twitch Competitor

    Microsoft’s Mixer Streaming Service Loses Its Two Co-Founders

    Microsoft’s Twitch competitor Mixer has lots its two co-founders: Both Matt Salsamendi and James J. Boehm, who co-founded the startup that eventually became Mixer in 2011, have both left the company over the past 2 weeks. The departure comes just a few weeks after Mixer poached famed video game streamer Ninja from Amazon’s Twitch. Salsamendi [...]

  • Trump-Twitch-channel

    Donald Trump Is Now on Amazon's Twitch Streaming Service

    Donald Trump has joined Twitch, the game-focused live-streaming service, apparently in an effort to widen his unfiltered 2020 reelection messaging as the embattled U.S. president faces a fast-moving impeachment inquiry. Trump’s first Twitch broadcast was from his campaign rally Thursday in Minneapolis, where among other targets he lashed out at Rep. Ilhan Omar (D-Minn.), Somali [...]

More From Our Brands

Access exclusive content