{"id":5177,"date":"2025-07-08T10:04:05","date_gmt":"2025-07-08T10:04:05","guid":{"rendered":"https:\/\/serisec.com\/index.php\/2025\/07\/08\/gamers-playing-call-of-duty-hacked-rce-exploited-let-players-hack-other-players-pcs\/"},"modified":"2025-07-08T10:04:05","modified_gmt":"2025-07-08T10:04:05","slug":"gamers-playing-call-of-duty-hacked-rce-exploited-let-players-hack-other-players-pcs","status":"publish","type":"post","link":"https:\/\/serisec.com\/index.php\/2025\/07\/08\/gamers-playing-call-of-duty-hacked-rce-exploited-let-players-hack-other-players-pcs\/","title":{"rendered":"Gamers Playing Call of Duty Hacked \u2013 RCE Exploited Let Players Hack Other Players\u2019 PCs"},"content":{"rendered":"<p>    Gamers Playing Call of Duty Hacked \u2013 RCE Exploited Let Players Hack Other Players\u2019 PCs<br \/>\n \t<BR><br \/>\n<BR><\/BR><br \/>\n    <!-- no image --><br \/>\n \t<BR><br \/>\n<BR><\/BR><\/p>\n<div>\n<p>Call of Duty: WWII has been pulled offline after reports of a serious <a href=\"https:\/\/cybersecuritynews.com\/kibana-vulnerabilities-allows-code-execution\/\" target=\"_blank\" rel=\"noreferrer noopener\">remote code execution<\/a> vulnerability that allowed malicious players to take complete control of other gamers\u2019 computers during live multiplayer matches.<\/p>\n<p>On Saturday, the Call of Duty development team announced that the PC version of Call of Duty: WWII had been taken offline following \u201creports of an issue.\u201d <\/p>\n<p>What initially appeared to be a routine technical problem has since been revealed as a critical security vulnerability that put thousands of PC gamers at risk.<\/p>\n<p>The issue centers around a remote code execution (RCE) exploit that allowed attackers to run malicious code on victims\u2019 machines without their consent or physical access. <\/p>\n<p>This vulnerability became particularly problematic just days after the 2017 title arrived on Microsoft\u2019s Game Pass subscription service, following Microsoft\u2019s acquisition of Activision in 2023.<\/p>\n<h2 class=\"wp-block-heading\"><strong>Hackers Wreaking Havoc During Live Games<\/strong><\/h2>\n<p>Reports from affected players paint a disturbing picture of the exploit\u2019s capabilities. During live multiplayer matches, malicious players were able to remotely access other participants\u2019 computers and execute a range of invasive actions. <\/p>\n<p>Victims <a href=\"https:\/\/www.malwarebytes.com\/blog\/news\/2025\/07\/gamers-hacked-playing-call-of-duty-wwii-pc-version-temporarily-taken-offline\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">reported<\/a> that attackers were opening command prompts on their PCs, sending mocking messages through Notepad, forcing remote shutdowns of their computers, and even changing desktop wallpapers to display inappropriate content.<\/p>\n<p>The vulnerability exclusively affects Windows PC gamers, as console systems generally don\u2019t allow this level of code execution. <\/p>\n<p>This technical limitation means that only players accessing the game through platforms like Game Pass and potentially Steam were at risk.<\/p>\n<h2 class=\"wp-block-heading\"><strong>Peer-to-Peer Network Architecture Creates Security Gap<\/strong><\/h2>\n<p>The root of the problem appears to lie in Call of Duty: WWII\u2019s reliance on <a href=\"https:\/\/cybersecuritynews.com\/p2p-worm-redis-instances\/\" target=\"_blank\" rel=\"noreferrer noopener\">peer-to-peer (P2P) networking<\/a> for its multiplayer matches. <\/p>\n<p>In this system, one player\u2019s machine acts as the server for the entire match, creating potential entry points for malicious actors to exploit vulnerabilities in other players\u2019 systems.<\/p>\n<p>This security flaw isn\u2019t entirely surprising to the Call of Duty community, where the hacking of older titles has become something of an \u201copen-air secret.\u201d <\/p>\n<p>Many experienced players have long avoided playing legacy Call of Duty games on Steam due to similar security concerns.<\/p>\n<h2 class=\"wp-block-heading\"><strong>Activision\u2019s Response and Future Updates<\/strong><\/h2>\n<p>There is considerable speculation within the gaming community about Activision\u2019s plans to update the game\u2019s anti-cheat system, known as \u201cRicochet,\u201d as the title has been increasingly plagued by various forms of abuse. <\/p>\n<p>However, whether and how this update will address the specific RCE vulnerability remains unclear.<\/p>\n<h2 class=\"wp-block-heading\"><strong>What Players Should Do<\/strong><\/h2>\n<p>Security experts and gaming communities are urging players to take immediate precautions while waiting for an official patch. <\/p>\n<p>The recommended steps include avoiding Call of Duty: WWII on PC entirely, particularly the <a href=\"https:\/\/cybersecuritynews.com\/windows-defender-policies-bypassed\/\" target=\"_blank\" rel=\"noreferrer noopener\">Microsoft Store<\/a> and Game Pass versions, until Activision releases a comprehensive security update.<\/p>\n<p>Players should also ensure their systems are protected by installing security updates promptly, maintaining active anti-malware software, and monitoring official Activision channels for updates on the fix.<\/p>\n<p>This incident serves as a stark reminder that even established gaming titles can pose significant security risks to players\u2019 entire computer systems, extending far beyond mere gameplay disruption into the realm of serious cybersecurity threats.<\/p>\n<p class=\"has-text-align-center has-background\" style=\"background:linear-gradient(135deg,rgb(238,238,238) 100%,rgb(169,184,195) 100%)\">Investigate live malware behavior, trace every step of an attack, and make faster, smarter security decisions -&gt; <a href=\"https:\/\/any.run\/demo?utm_source=li_csn&amp;utm_medium=post&amp;utm_campaign=red_flags&amp;utm_content=demo&amp;utm_term=070725\" target=\"_blank\" rel=\"noreferrer noopener nofollow\"><strong>Try ANY.RUN now<\/strong><\/a>\u00a0<\/p>\n<p>The post <a href=\"https:\/\/cybersecuritynews.com\/gamers-playing-call-of-duty-hacked-rce-exploited\/\">Gamers Playing Call of Duty Hacked \u2013 RCE Exploited Let Players Hack Other Players\u2019 PCs<\/a> appeared first on <a href=\"https:\/\/cybersecuritynews.com\/\">Cyber Security News<\/a>.<\/p>\n<\/div>\n<p> \t<BR><br \/>\n <BR><\/BR><br \/>\n    Kaaviya<br \/>\n \t<BR><br \/>\n<BR><\/BR><br \/>\n<a href=\"https:\/\/cybersecuritynews.com\/gamers-playing-call-of-duty-hacked-rce-exploited\/\">Go to cyber-security-news<\/a><br \/>\n \t<BR><br \/>\n <BR><\/BR><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Gamers Playing Call of Duty Hacked \u2013 RCE Exploited Let Players Hack Other Players\u2019 PCs Call of Duty: WWII has been pulled offline after reports of a serious remote code execution vulnerability that allowed malicious players to take complete control of other gamers\u2019 computers during live multiplayer matches. On Saturday, the Call of Duty development [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[129,63,1112],"tags":[130],"class_list":["post-5177","post","type-post","status-publish","format-standard","hentry","category-cyber-security","category-cyber-security-news","category-hacking-news","tag-cyber-security-news"],"_links":{"self":[{"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/posts\/5177"}],"collection":[{"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/comments?post=5177"}],"version-history":[{"count":0,"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/posts\/5177\/revisions"}],"wp:attachment":[{"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/media?parent=5177"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/categories?post=5177"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/tags?post=5177"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}