We know that the popularity of CS: GO is absolutely huge. When we talk about the Valve title, we are referring to one of the works that more players congregate around the world, every day.
Therefore, the vigilance of the company on the affairs of the game must be extreme. That is why we are surprised by the information revealed by Vice, which indicates that there is an error in CS: GO that can cause a hacker to take control of your computer .
The story behind this issue comes from Florian, a security researcher, who detected a bug present in the Source Engine graphics engine . This engine is used by games like CS: GO itself or Team Fortress, among others, in addition to being owned by Valve.
Florian warned of the existence of this failure and through HackerOne , the platform that Valve uses to reward the discovery of vulnerabilities in its systems, reported the problem.
Although the company acknowledged its existence, calling it a “critical error”, to this day it is still present in the shooter . All of this happened more than two years ago.
“Honestly, I’m very disappointed because they directly ignored me most of the time,” Florian explains to Vice. Another person found the same bug as Florian, months later, and the two reports were merged.
According to Florian, he was able to create an exploit capable of exploiting that hole through which to sneak into our systems 80% of the time. “Once you have infected someone, this person can become a weapon to infect their friends, etc.” This could happen through different invitations to play on Steam.
Carl Schou, founder of the Secret Club (a non-profit group of security researchers), has reported two other serious flaws. They have also been reported to Valve by its members. However, ” Valve’s response has been a complete disappointment from the start .”
We will see if Valve takes the appropriate measures to put an end to this problem, since CS: GO currently has millions of simultaneous players.
