…your PC may have been exposed to a rootkit or other malicious software that could cause further damage."

“The rootkit you installed on your pc allowed a rootkit or other malicious software to be installed on your PC.”

Fyi, it’s “no holds barred” as in no type of hold is disallowed. “no holes barred” is a decidedly different sort of event

There is currently no evidence of an RCE exploit in EAC, and EAC themselves as well as their owner, Epic, have both denied the existence of an RCE in their software.

There’s a video from about a month ago in which ImperialHal and Genburten (on separate occasions) are in a match against the person named in the messages sent by the exploit on Genburten’s machine.

It’s possible that they were in contact with the hacker after that point and that he tricked them into downloading something they shouldn’t have.

Otherwise, it’s also possible that there is an exploit in Apex/Source that the hacker used. He may have been able to get their IP during the public match a month ago and then use it to target them during the competition.

Beyond what was seen during the competition, the hacker was also able to gift thousands of Apex packs to several players (seemingly without paying for them) and was able to get 40+ “bot” players into a single match and to all target an individual player. He also claimed to be able to open crates on another player’s account. These other exploits seem to indicate that he has elevated access to both the server and to multiple APIs, but none of them indicate elevated access to user machines in general.

Hacking aside it is funny to me that the anti-cheat made it possible to enable cheats.

The clips of the hacks being installed/activated are pretty crazy:

• Genburten hacked (and Zer0’s POV)
• ImperialHal hacked

Note that the title has been edited: we do NOT know if this was EAC yet. The article says it “may have been.” EAC has claimed it wasn’t them (but of course they’re going to claim that). Instead, it could have been Apex’s source engine. Or, it could have been two individually compromised machines from software completely unrelated to Apex; remember, these are two high-profile targets, after all. We just have to wait and see what the real cause was. Regardless, I wouldn’t play Apex for at least the next day or two, just to be safe.

So, lemme get this straight: allowing remote parties to install malware (DRM) on your system results in allowing remote parties to install malware on your system? Wow, who could have known! Certainly not the distributors of the step-one malware, am I right?

I’m certain there’s a couple of lessons to be learned here (install and run games as normal, non-elevated users, people! It’s easy to do on Linux) but I’m also somehow certain Big Corpos are going to stick their heads into the sand regarding such lessons.

Oh well, the pirate way it is.

The real cheats are the proprietary software we installed along the way.

leopards.exe has eaten your face and will continue.

[OK] [Yes] [I deserve it]

The missing context here (not your fault, i think people reporting this are being misleading) is that they were using their personal systems in this tournament. That means whatever dodgy software they’ve installed can’t be monitored in a controlled environment, and claims of it being EAC’s fault is unfounded.

A proper tournament would have controlled hardware and software, even if playing remotely at a professional level. You can’t guarantee these systems haven’t been tampered with, even if the players insist on proper security measures.

Is there any actual evidence that this was done via an EAC exploit?

These could be two spear phished players with hacked PCs. (2 of the best and biggest audiences making them ideal targets). People have also mentioned r5 potentially being a culprit.

If this was eac related or even a bigger client side hack (RCE), you’d think it’d be more wide spread.

I wish the reporting on this was better all around. At this point I’ve seen no actual evidence of anything supporting RCE or that it was EAC to blame.

Apparently the “easy” in EAC means easy like when you call a woman easy…

Sounds fanciful.

EAC doesn’t open up ports into your network as far as I’m aware.

Pretty much the only way to do RCE in games with no direct P2P connection is to send malformed data to the server, and then it sends that to the other clients, relying on things not being checked in two places. We’ve seen this a few times, in Dark Souls series and GTA Online.

I can’t see for the life of me how EAC would cause that.