Fortnite aimbot cheat actually deletes players' PC files

250 million players across PC, Xbox, PS4 and other devices are at risk to the malware

Anthony Cuthbertson
Thursday 22 August 2019 08:41 EDT
Comments
Hackers are targeting Fortnite players with the promise of an 'aimbot' tool
Hackers are targeting Fortnite players with the promise of an 'aimbot' tool (AFP/Getty Images)

Your support helps us to tell the story

From reproductive rights to climate change to Big Tech, The Independent is on the ground when the story is developing. Whether it's investigating the financials of Elon Musk's pro-Trump PAC or producing our latest documentary, 'The A Word', which shines a light on the American women fighting for reproductive rights, we know how important it is to parse out the facts from the messaging.

At such a critical moment in US history, we need reporters on the ground. Your donation allows us to keep sending journalists to speak to both sides of the story.

The Independent is trusted by Americans across the entire political spectrum. And unlike many other quality news outlets, we choose not to lock Americans out of our reporting and analysis with paywalls. We believe quality journalism should be available to everyone, paid for by those who can afford it.

Your support makes all the difference.

A new Fortnite cheat that improves the aiming accuracy of players is actually a dangerous type of malware, security researchers have discovered.

The aimbot hack promises players of the popular video game a way to shoot competitors without having to take careful aim. It also claims to offer 'ESP', meaning the location of other players is easily visible.

Cyber security firm Cyren found that the free cheat is in fact ransomware in disguise, meaning anyone who downloads it will put all of the files on their PC or other device at risk of being encrypted or even deleted.

"A new ransomware auto-denominated 'Syrk', built with tools available on the internet, has been found to be masquerading as a game hack tool for Fortnite," the researchers wrote in a blog post detailing their findings.

"We expect it to possibly be distributed via an upload to a sharing site and the link posted by Fortnite users in forums."

Once downloaded, the malware disables any anti-virus security and infects various locations of the device. Files within Pictures, Desktop and Documents folders are automatically encrypted and a timed deletion is activated.

A message on the victim's screen states: "Your personal files are being encrypted by Syrk malware. Your photos, videos, documents, etc."

The hacker requests payment through a semi-anonymous cryptocurrency like bitcoin in order for files to be released and the ransomware to be removed.

"After paying, you will be sent a password that will be used to decrypt your files," the message states. "If you don't do these actions before the timer expires your files will start to be deleted.

It is not the first time cyber criminals have attempted to take advantage of Fortnite's record-breaking popularity. Since launching in 2017, Fortnite has grown into the world's most popular online video game, with an estimated 250 million players around the world

The prospect of free in-game currency has tempted thousands of Fortnite players to download a virus
The prospect of free in-game currency has tempted thousands of Fortnite players to download a virus (Fortnite)

In 2018, researchers at the cyber security firm Zerofox discovered 53,000 different instances of online scams relating to Fortnite, many of which were shared across social media and player forums.

Beyond ransomware, other scams aim to trick players into sharing their login details for the game or other personal details like their credit card information.

Several security professionals have criticised Fortnite developer Epic Games for not doing enough to combat the scourge of scams targeting Fornite players, many of whom are under 18 years old.

Zerofox researchers warned at the time: "Despite Fortnite's best attempts to circumvent players from using these fraudulent websites through their forums and support, players continue to fall victim to these kinds of scams daily."

Join our commenting forum

Join thought-provoking conversations, follow other Independent readers and see their replies

Comments

Thank you for registering

Please refresh the page or navigate to another page on the site to be automatically logged inPlease refresh your browser to be logged in