If that sounds crazy, it’s because it is a little bit crazy. But it’s also incredibly clever. <\/p>\n\n\n\n
So, today we’re going to spend a little bit of time talking about Fortnite, money laundering and whether or not Epic games bears any responsibility.<\/p>\n\n\n\n
Let’s hash it out.<\/p><\/span>\n\n\n\n Fortnite has become a cultural phenomenon around the world because it’s free and can be played on pretty much any platform (console, PC, mobile).<\/p>\n\n\n\n You may be asking, how does a free game make $3-billion? Good question. Micro-transactions. Fortnite has its own in-game currency, V-bucks. You can use V-bucks to customize your game – buy costumes, weapons, items – you name it. <\/p>\n\n\n\n And much like what’s been documented in other games such as World of Warcraft<\/a>, criminals have figured out a way to monetize the in-game economy, in the process laundering their ill-gotten gains. <\/p>\n\n\n\n And there’s the $3-billion question. Here’s how: use stolen credit card info – or create accounts using stolen personal info – to purchase V-bucks from the official Fortnite store. These kinds of credentials are readily available on the dark web (and even some places on the normal web). They don’t cost much, either. <\/p>\n\n\n\n Using those stolen credit cards, cybercriminals purchase points from the Fortnite store and then sell them at deeply discounted rates, essentially laundering the money. <\/p>\n\n\n\n The Independent’s investigation monitored six different dark web black markets where it found myriad discounted points available, oftentimes in exchange for cryptocurrency. <\/p>\n\n\n\n \u201cCriminals are executing carding fraud and getting money in and out of the Fortnite<\/em> system with relative impunity,\u201d Benjamin Preminger, a senior intelligence analyst at Sixgill, told <\/a>The Independent<\/a><\/em>.<\/a>\u201cThreat actors [a malicious person or entity] are scoffing at Epic Games\u2019 weak security measures, saying that the company doesn\u2019t seem to care about players defrauding the system and purchasing discounted V-bucks\u2026 This directly touches on the ability of threat actors to launder money through the game.\u201d<\/p> Benjamin Preminger, Sixgill <\/cite><\/blockquote>\n\n\n\n Sixgill found that over a 60-day period, just on eBay, Fortnite items grossed over $250K, but that doesn’t really speak to the extent and breadth of this problem. <\/p>\n\n\n\n If you’ll remember last year when we covered some of the biggest cybercrime statistics of 2018<\/a>, that one of the biggest issues faced by most cybercriminals is how to get the money out. Stealing it is one thing, but how do you launder it so that you won’t draw suspicion when you actually take it out?<\/p>\n\n\n\n Well, here’s one way. Using Fortnite. <\/p>\n\n\n\n Clever. <\/p>\n\n\n\n I’ve got a suspicion there are more than a few mobile apps that accomplish something similar, using micro-transactions to launder money through Apple and Google. <\/p>\n\n\n\n That all depends on your perspective. Let’s start with Sixgill’s Ben Preminger, who thinks more should be done:<\/p>\n\n\n\n \u201cEpic Games doesn\u2019t seem to clamp down in any serious way on criminal activity surrounding Fortnite<\/em>, money laundering or otherwise,\u201d Mr Preminger said<\/a>. \u201cWhile completely stopping such criminal activity is extremely difficult, several steps could be taken to mitigate the phenomenon, including monitoring the transfer of high-value goods in the game, identifying players with large stockpiles of V-bucks, and sharing data with relevant law enforcement agencies.\u201d<\/p>Benjamin Preminger, Sixgill<\/cite><\/blockquote>\n\n\n\n Epic Games didn’t respond to a request for comment from The Independent, but I’m sure on some level the company just wants to focus on making games and not have to become some kind of international money laundering policeman.<\/p>\n\n\n\n Which, that’s fair.<\/p>\n\n\n\n Certainly, this industry has an interesting take on corporate responsibility. We inspired more than a little vitriol a couple years ago when we documented the number of SSL\/TLS certificate Let’s Encrypt had issued to PayPal phishing sites<\/a>. The prevailing logic being that discerning the good actors from the bad wasn’t a job for Certificate Authorities.<\/p>\n\n\n\n Recently, Let’s Encrypt announced it’s not even going to check the Google Safe Browsing list<\/a> any more before issuance.<\/p>\n\n\n\n Let\u2019s Encrypt has stopped checking domains against the Google Safe Browsing API before issuance… Since 2015, Let\u2019s Encrypt has been using this API to check domains before issuing certificates. If a domain was flagged as unsafe by Google Safe Browsing we would not issue a certificate.<\/p>Josh Aas, Executive Director<\/a><\/cite><\/blockquote>\n\n\n\n So, going by that logic, don’t worry about it, you just keep doing you, Epic. <\/p>\n\n\n\n As always, leave any comments or questions below…<\/em><\/p>\n\n\n\n Those discounted V-bucks might be helping cybercriminals launder their money. The game Fortnite is massively popular, with over 200,000,000 players around the world. The game made its developer, Epic Games,…<\/p>\n","protected":false},"author":6,"featured_media":8289,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":"","tve_updated_post":"","tve_custom_css":"","tve_user_custom_css":"","tve_globals":{},"tcb2_ready":0,"tcb_editor_enabled":0,"tve_landing_page":"","_tve_header":"","_tve_footer":""},"categories":[16],"tags":[9682],"class_list":["post-8288","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-hashing-out-cyber-security","tag-fortnite","post-with-tags"],"views":10152,"jetpack_featured_media_url":"https:\/\/www.thesslstore.com\/blog\/wp-content\/uploads\/2019\/01\/bigstock-Amsterdam-The-Netherlands-S-260754244.jpg","_links":{"self":[{"href":"https:\/\/www.thesslstore.com\/blog\/wp-json\/wp\/v2\/posts\/8288","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.thesslstore.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.thesslstore.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.thesslstore.com\/blog\/wp-json\/wp\/v2\/users\/6"}],"replies":[{"embeddable":true,"href":"https:\/\/www.thesslstore.com\/blog\/wp-json\/wp\/v2\/comments?post=8288"}],"version-history":[{"count":0,"href":"https:\/\/www.thesslstore.com\/blog\/wp-json\/wp\/v2\/posts\/8288\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.thesslstore.com\/blog\/wp-json\/wp\/v2\/media\/8289"}],"wp:attachment":[{"href":"https:\/\/www.thesslstore.com\/blog\/wp-json\/wp\/v2\/media?parent=8288"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.thesslstore.com\/blog\/wp-json\/wp\/v2\/categories?post=8288"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.thesslstore.com\/blog\/wp-json\/wp\/v2\/tags?post=8288"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}Let’s talk about Fortnite<\/h2>\n\n\n\n
Ok, how do you launder money in Fortnite?<\/h2>\n\n\n\n
![\"The](\"https:\/\/www.thesslstore.com\/blog\/wp-content\/uploads\/2018\/05\/TSS-Hashedout-Blog-Graphic-03.svg\")
<\/figure>\n\n\n\n![\"Up](\"https:\/\/www.thesslstore.com\/blog\/wp-content\/uploads\/2018\/05\/TSS-Hashedout-Blog-Graphic-07.svg\")
<\/figure>\n\n\n\nDoes Epic Games bear any responsibility for this?<\/h2>\n\n\n\n
![\"Hashed](\"https:\/\/www.thesslstore.com\/blog\/wp-content\/uploads\/2018\/08\/bigstock-222348568-1024x267.jpg\")
<\/figure>\n","protected":false},"excerpt":{"rendered":"