Hackers target Xbox Live players

Have a read and let us know what you think.
Post Reply
User avatar
CoFree
Robinhood
Robinhood
Posts: 13414
Joined: Wed Nov 07, 2007 1:38 pm
Location: In the Forest
Contact:

Hackers target Xbox Live players

Post by CoFree »

Hackers target Xbox Live players
Image
Halo 3 players are a popular target for the Xbox attacks

Xbox Live is being targeted by malicious hackers selling services that kick players off the network.

The booting services are proving popular with players who want a way to get revenge on those who beat them in an Xbox Live game.

The attackers are employing data flooding tools that have been used against websites for many years.

Microsoft is "investigating" the use of the tools and said those caught using them would be banned from Xbox Live.

"There's been a definite increase in the amount of people talking about and distributing these things over the last three to four weeks," said Chris Boyd, director of malware research at Facetime Communications.

Attack tool

"The smart thing about these Xbox tools is that they do not attack the Xbox Live network itself," he said.

He said the tools work by exploiting the way that the Xbox Live network is set up. Game consoles connecting to the Xbox network send data via the net, and for that it needs an IP address.

Even better, said Mr Boyd, games played via Xbox Live are not hosted on private servers.
Dollars and wallet, Eyewire
The tools mean anyone with a few dollars can boot rivals off Xbox Live

"Instead," he said, "a lot of games on Xbox Live are hosted by players."

If hackers can discover the IP address of whoever is hosting a game they can employ many of the attacks that have been used for years against websites, said Mr Boyd.

One of the most popular for the Xbox Live specialists is the Denial of Service attack which floods an IP address with vast amounts of data.

The flood of data is generated by a group of hijacked home computers, a botnet, that have fallen under the control of a malicious hacking group.

When turned against a website this flood of traffic can overwhelm it or make it unresponsive to legitimate visitors.

When turned against an Xbox owner, it can mean they cannot connect to the Live network and effectively throws them out of the game.

"They get your IP address, put it in the booter tool and they attempt to flood the port that uses Xbox traffic," said Mr Boyd. "Flooding that port prevents any traffic getting out."

Skill set

The hard part, he said, was discovering a particular gamer's IP address but many malicious hackers had honed the skills needed to find them.

Some interconnect their PC and Xbox and use packet sniffing software to hunt through the traffic flowing in and out of the console for IP addresses.
Ethernet connector, Eyewire
The hackers target the way Xbox consoles connect to the net

Others simply use con tricks to get the target to reveal their net address.

The technical knowledge needed to hunt down IP addresses was quite high, said Mr Boyd, but many of those who had the skills were selling their expertise to those keen to hit back at their rivals on the Xbox Live network.

For $20 (£13) some Xbox Live hackers will remotely access a customer's PC and set up the whole system so it can be run any time they need it.

Some offer low rates to add compromised machines to a botnet and increase the amount of data flooding a particular IP address.

Defending against the attack could be tricky, said Mr Boyd: "There's no real easy solution to this one."

Although IP addresses regularly change, people could find it takes hours or days for their ISP to move them on to a new one.

In response to the rise in attacks, Microsoft said: "We are investigating reports involving the use of malicious software tools that an attacker could use to try and disrupt an Xbox LIVE player's internet connection."

It added: "This problem is not related to the Xbox Live service, but to the player's internet connection. The attacker could also attempt [to] disrupt other internet activities, such as streaming video or web browsing, using the same tools.

In its statement Microsoft warned: "This malicious activity violates the Xbox Live Terms of Use, and will result in a ban from Xbox Live and other appropriate action.

It urged anyone falling victim to such an attack to contact their ISP to report it and get help fixing it.

In January 2009 Microsoft announced that Xbox Live had more than 17m members.
"FIGHTING TYRANNY in a TECHNOLOGICAL NOTTINGHAM"
Image
No Questions by PM.
User avatar
Backslash
Possible Ally of Robinhood
Possible Ally of Robinhood
Posts: 744
Joined: Sun Jan 04, 2009 1:51 am
Location: New York
Contact:

Re: Hackers target Xbox Live players

Post by Backslash »

Damn man I hate people like this... :evil:
Image
User avatar
HaGGardSmurf
Ally of Robinhood
Ally of Robinhood
Posts: 4088
Joined: Tue Feb 03, 2009 9:46 am
Location: Alberta, Canada

Re: Hackers target Xbox Live players

Post by HaGGardSmurf »

As do I, If you have enough time to create things like this, maybe you should spend some of that time playing whatever game it is that you suck at, and get better so you dont need 'tools' to get revenge against your rivals. With that said, if you get angry enough at someone beating you in a game, you should probably not play online, and stick to viva pinata.
User avatar
CoFree
Robinhood
Robinhood
Posts: 13414
Joined: Wed Nov 07, 2007 1:38 pm
Location: In the Forest
Contact:

Re: Hackers target Xbox Live players

Post by CoFree »

UpDate:

Microsoft responds to Xbox Live denial-of-service attack

Microsoft says Xbox 360 owners affected by denial-of-service attacks should contact their Internet provider, although they're threatening the malicious standard of banning any and all hackers. This is a new front in the war against talented players.

Beating someone over Xbox Live usually results in nothing more than a string of expletives, but some users are reporting that they're now getting kicked off the network by sore losers using a denial-of-service attack, which bombards your Internet connection with bogus data until it drops out.

Worse still, hackers are selling DOS on demand to disgruntled players, the BBC News reported today. That means anyone with a few bucks and a lack of morals can attack players who are simply too good at Street Fighter IV.

In a statement given to Ars Technica on Friday, a Microsoft representative responded by saying, "In our continued effort to help provide a safer and more secure experience for our community of more than 17 million members, we are investigating reports involving the use of malicious software tools that an attacker could use to try and disrupt an Xbox Live player's Internet connection."

"This problem is not related to the Xbox Liveservice, but to the player's internet connection," the representative added. "The attacker could also attempt disrupt other internet activities such as streaming video or web browsing using the same tools."

Fair enough. Since Xbox Live games connect to the Internet like everything else, using an IP address, it's possible for hackers to discover your address using underground packet-sniffing software, then flood the Xbox port with incoming data to boot you off. Other offenders are reportedly asking for an IP address by sneaky means before opening the denial-of-service floodgates.

More disturbing, however, is that the uninitiated are paying skilled hackers to set up the whole process for them, to be run anytime they feel like being nasty, and thereby inflating the number of attacks. The BBC said these services go for a one-time fee of $20.

The immediate solution to avoid reoccurring attacks would be to refresh your IP address, but it's only a matter of time before a persistent pest decides to try again. In that case, Microsoft says to call your ISP to report an incident, and hopefully, get heightened security.

The company did not say how often these attacks occur, only that it is looking into the matter and banning any malicious offenders from Xbox Live.

=========================================================================================================
=========================================================================================================

Microsoft says to call your ISP to report an incident


well with that statement it sounds like M$ is is looking for someone else to fix a security problem.
Once again not stepping up to the plate to fix a problem.
"IMO"
CoFree
"FIGHTING TYRANNY in a TECHNOLOGICAL NOTTINGHAM"
Image
No Questions by PM.
User avatar
technoe
Ally of Robinhood
Ally of Robinhood
Posts: 1767
Joined: Wed Jan 14, 2009 2:30 pm
Location: Clarksville, TN

Re: Hackers target Xbox Live players

Post by technoe »

This really sucks, especially since I just moved my xbox into the DMZ. I don't want to move it back behind the router on the account that I'm gonna head-shot about 70% of the people I play on Vegas 2.
Image
Today Money, Tomorrow the WORLD!!
User avatar
HaGGardSmurf
Ally of Robinhood
Ally of Robinhood
Posts: 4088
Joined: Tue Feb 03, 2009 9:46 am
Location: Alberta, Canada

Re: Hackers target Xbox Live players

Post by HaGGardSmurf »

M$ is probably the worst at doing anything...

Why wouldn't you release an update for the nxe, and if you send more then x packets in x seconds, it logs the ip you sent to, how many packets etc. Then they could just use some algorithm, to check to make sure its not some false alarm, then ban the people.

M$ never does anything, they always just do the whole 'ignore it and it will go away'
Post Reply

Return to “Front Page News”