4 ms·
Curious how they got the players/clients IPs to begin with ?
by mech422 3y ago
Curious how they got the players/clients IPs to begin with ?
- ParetoOptimal 3y agoMy best theory is that they: - stream sniped ImperialHal and Gen - had some way of getting uuids from the client - used those uuids in combination with an RCE However, I'm still leaning more strongly towards the theory that gamers who don't care about security got social engineered into downloading a RAT and have compromised computers. And if it happened to two, it's infinitely more likely that could be leveraged to social engineer others in that group.
- mech422 3y agoyeah - social engineering seems a common/likely approach. I'd assume their machines are on different (private) networks for each tournament/location. So, it would much easier to have a pre-installed exploit phone out to the attacker then trying to get in past NAT to exactly the right players ?
- Tarq0n 3y agoPost some links in their Twitch chat to i.e. images on a server you control. Correlate your access logs with geoip information and you have a good chance of getting their IP.
- mech422 3y agoI would have expected the tournament to be behind NAT, so the the client machines would have unroutable ips, and the server would just get the IP of the router - not the individual clients ?