Breaking News

Dark Souls 3 exploit could let hackers take control of your entire computer

Dark Souls 3 exploit could let hackers take control of your entire computer

According to a report by Dexerto, a dangerous remote code execution (RCE) exploit found in Dark Souls 3 could let a bad actor take control of your computer. The vulnerability only puts PC gamers at risk who play online and could potentially affect Dark Souls, Dark Souls 2 and the upcoming Elden Ring. Servers for various Dark Souls games have since been shut down in response.

The exploit was seen in action during The__Grim__Sleeper's Twitch stream of Dark Souls 3 Online. At the end of the stream (1:20:22), The__Grim__Sleeper's game crashes, and a robot voice belonging to Microsoft's text-to-speech generator suddenly starts criticizing its gameplay. The__Grim__Sleeper then reports that Microsoft PowerShell opened automatically, a sign that a hacker used the program to run a script that triggered the text-to-speech feature.

However, it probably wasn't a malicious hacker - a screenshot posted on SpeedSouls Discord could reveal the "hacker"'s true intentions. According to the post, the "hacker" was aware of the vulnerability and attempted to contact Dark Souls developer FromSoftware about the issue. He was reportedly neglected, so he began using hacks on the streamer to draw attention to the problem.

But if a bad actor had come to know about this problem earlier, the result could have been worse. RCE is one of the most dangerous vulnerabilities, as noted by Kaspersky. This allows hackers to run malicious code on their victim's computer, causing irreparable damage, and potentially stealing sensitive information while they are at it.

Blue Sentinel, the community-produced anti-cheat mod for Dark Souls 3, has since been patched to protect against the RCE vulnerability. In a post on the r/darksouls3 subreddit, a user explains that (hopefully) only four people know how to execute the RCE hack - two of whom are Blue Sentinel developers, and the other two are "working on it". Referring to individuals who helped uncover the issue.

A representative for Bandai Namco, the publisher of Dark Souls, commented on a Reddit post in response to the issue, saying: "Thanks so much to Ping, a report on this topic was submitted to the relevant internal teams earlier today, information Much appreciated!" The Verge reached out to Bandai Namco with a request for comment, but did not immediately hear back.

Luckily, it looks like FromSoftware and Bandai Namco are addressing the issue. On Sunday morning, the Dark Souls Twitter account announced that the PvP servers for Dark Souls: Remastered, Dark Souls 2 and Dark Souls 3 were temporarily closed due to "recent reports of a problem with the team's online services". has gone. To allow investigation." It added that servers for Dark Souls: Ready to Die Edition will also be disabled soon. This only affects PC players — if you're playing on PlayStation or Xbox, too. You can play online. No word when the server will be back.

No comments