22 April 2020

Hackers are using breached Nintendo accounts to buy Fortnite game currency


Hackers are using breached Nintendo accounts to buy Fortnite game currency

For the past month numerous users of the Nintendo platform have been complaining that their accounts have been getting hacked and accessed from remote locations, in some cases users reported that they have lost money due to an unauthorized breach.

It appears the attacks have started mid-March and have gradually increased reaching a peak last weekend when more and more users have started receive email alerts informing them that unknown IP addresses have accessed their Nintendo profiles. Some users reported their accounts had been used to buy digital items, such as bundles of Fortnite VBucks worth up to £100, via linked PayPal accounts.

Currently it remains unknown how hackers are breaching accounts. It’s not clear whether the hackers are making use of passwords stolen from other sites to get access to the Nintendo accounts.

However, some users have reported using unique strong passwords, related only to their Nintendo account and not used anywhere else.

As ZDNet reports, hackers have already started selling Fortnite V-Bucks obtained from breached Nintendo Switch accounts via ads put online this month.

Meanwhile, Nintendo said it is aware of reports of unauthorized access to some Nintendo accounts and is investigating the issue. As a security measure, the company recommends users to enable two-step verification for their Nintendo account.

Back to the list

Latest Posts

Chinese hackers reportedly breach Volkswagen Group, steal proprietary technology

Chinese hackers reportedly breach Volkswagen Group, steal proprietary technology

The hackers targeted the company for at least five years.
22 April 2024
MITRE discloses security breach via Ivanti zero-days

MITRE discloses security breach via Ivanti zero-days

The organization said that an unnamed foreign state-sponsored threat actor was behind the attack.
22 April 2024
CrushFTP patches actively exploited zero-day

CrushFTP patches actively exploited zero-day

The flaw is being exploited in attacks targeting CrushFTP servers at multiple US entities.
22 April 2024