Analyst: hackers to target online consoles this year

by Ross Miller { Apr 5th 2007 at 12:24PM }

And so we're raising the Console Terror Alert Level to intense orange-red, based on very credible, detailed information on a non-specific threat.

A security analyst for Australia's Computer Emergency Response team (who, contrary to the emergency response phrasing, don't get their own vans with flashing lights and sirens) has warned that, due to the online integration of new game consoles, he expects hackers to soon target your Xbox 360 and PlayStation 3 consoles.

"I haven't seen any malicious code that is specifically designed to run on a PlayStation 3 or an Xbox but I would expect it is not very far away," he said. CVG notes that these predictions come after the Xbox Live account hack fears, though those turned out to be nothing more than some idiotic customer service reps being talked into divulging info over the phone.

Given that Xbox Live titles are tied to the original console and gamertag only, we'd say the possibility of a theft of your games and / or save files very unlikely. Not only that, but the peer-to-peer transfer of files over any of the console's self-contained networks is not possible. (In this sense, the PS3 and Wii are more vulnerable by merit of having a web browser.) There is always a worry over any medium where you have to enter financial or personal information (in this case your credit card), and the Xbox 360's inability to let you erase that card information has been chronicled in the past. However, the likelihood that you will be the victim of a console hack (and not in the traditional sense) without instigating it through your own console modding is, in our estimations, very slim.

Tags: connect 24, Connect24, playstation network, PlaystationNetwork, psn, security, wii connect 24, WiiConnect24, xbox live, XboxLive

Reader Comments (Page 1 of 1)

Mr Khan @ Apr 5th 2007 12:37PM

I'd say PS3 and Wii are more likely targets via their web browsers, but i'm not sure how much interaction the browsers have with the main OS,

Zertoss @ Apr 5th 2007 12:38PM

I don't know about attacks targeting PS3s (Linux, lol), but they could certainly generate from them. I think the 360 is the likeliest target. Wii's Connect24 thing makes it a potential target as well.

Probably mostly DDoS attacks, I wouldn't worry about viruses and trojans and such just yet.

Seedy @ Apr 5th 2007 12:39PM

The Xbox 360 must be a huge goal for them, especially since it's online aspect is it's major selling point.

dark @ Apr 5th 2007 12:39PM

So should we be worried? huh? are we worried? are we? oh god, don't panic, come on guys just don't panic........aaaaaaaaaaaaaaahhhhhhhhhhhhhhhhhhhhhhhhh.

dark @ Apr 5th 2007 12:40PM

*jumps out of window*

ncxcstud @ Apr 5th 2007 12:42PM

You can erase credit card info from your 360. YOu have to do it from the Windows Live ID page at accountservices.passport.net

Login, go to options and select billing.

From here you can remove credit card info and see what your current 'subscriptions' are. Like for the Halo 2 maps, etc...

Oobgarm @ Apr 5th 2007 12:51PM

SOMEONE PROMOTE THIS ANALYST.

THEY ARE A GENIUS.

Seriously, wtf? Who DOESN'T know/expect this?

Vidikron @ Apr 5th 2007 12:54PM

I don't see how any attack will work given that these systems aren't fully cracked yet. They can't be used to run unsigned code. I supposed you could attack a PS3 running Linux, but that seems like an unlikely target.

dvnt @ Apr 5th 2007 12:57PM

Wait, they have analysts for the "hacking" community?

Seriously, people get paid to say "I think the moon will crash into the Earth on Tuesday at 3:47pm CST... wear a bucket"?

I wonder if they live on top of a rocky spire, garbed in ratty robes to hide their mangled features and accept payment in gold bullion.

REUYL @ Apr 5th 2007 1:02PM

Uh oh, THE ANALYSTS ARE ON TO ME! Guess I should start wearing my tin foil hat again!

Vidikron @ Apr 5th 2007 1:10PM

I think the servers running the online services are much more likely targets than the systems themselves.

Pixelantes Anonymous @ Apr 5th 2007 1:14PM

Why would anyone bother hacking game consoles when there're hundreds of millions broadband connected PCs out there that are not only easier to hack into, but also more useful when they've been hacked into?

I think the "analyst" was just trying to get a press mention disguised as a "research piece". What an easy way to generate a few additional leads for your security consulting services than a sensational story about hacker avalanche.

dark @ Apr 5th 2007 1:18PM

*jumps out of window again*

LaughingTarget @ Apr 5th 2007 1:21PM

Not going to be an epidemic for two reasons:

1. Can't steal anything. What're they gonna do? Use your Live account? Can't steal your CC information because all it looks like is ************6789. Sure, can try and hijack to play on Live, but a quick call to customer service will get the password changed, making it a pointless endeavor. I figure the worst that can happen is someone downloads something off Marketplace or PSN that you didn't want.

2. Volume. There just aren't enough consoles out there to make it worth the effort. 120 million is beans compared to the PC market. Hacking is all about stealing or creating mayhem and that requires volume. There are more Macs connected to the internet than game consoles and they're not a big enough market to make it worthwhile.

Oobgarm @ Apr 5th 2007 1:51PM

*jumps out of window, following dark's lead*

deaftly @ Apr 5th 2007 1:53PM

i picked the wrong day to stop sniffing glue.

"jumps out window"

chuy_dbzfreak2 @ Apr 5th 2007 2:22PM

*jumps out of windows 'cause everybody is doing it*

Vidikron @ Apr 5th 2007 2:39PM

@15

Actually, I disagree with the notion that there aren't enough consoles to make them an attactive target. Hacking is often about the challenge and attention. While bigger numbers help out with the attention aspect, the fact there haven't been any massive attacks on online console means a lot of attention would come from doing it.

Just look how much attention was drawn when people thought Live was hacked. Even though it turned out to be a simple scam, it drew quite a bit of attention in the press and even a press release from MS. Basic scams like that are hardly news worthy on PCs anymore.

The same applies here. If anyone does figure out to spread a virus through online consoles is would be huge news. Sure, you may have relatively few consoles damaged compared to a PC virus outbreak, but the rarity of such an attack will make it a big headline. Bottom line: You people claiming it wouldn't be worth the time to a hacker are dead wrong. They are very attractive targets.

That said, I think such an attack is highly unlikely given the tight security of the consoles.

samfish @ Apr 5th 2007 3:01PM

They've been saying this about OS X and Macs for years.
Still hasn't happened.

Somehow, I'm not too worried.

ssuk @ Apr 5th 2007 3:11PM

Analyst: Players to play video games this year.

Seriously, this 'threat' is made up every year and still shit all happens. Some kids get their gamertag stupidly stolen on Xbox Live and someone hits on the idea that we're all doomed! ITS GLOBAL WARMING ONLY NOT OVER-EXSADURATED AND WE'RE ALL GOING TO BE HACKED! HACKED I TELL YOU!

Patrick @ Apr 5th 2007 5:12PM

dvnt, nice 300 reference

letmethinkaboutit @ Apr 5th 2007 7:01PM

why in the world are people using the wireless part of the ps3? Don't you know it is easy for those pc cards to break the security. A few months after a router is out even with password protecting it is not safe. Happy bandwith sharing suckers!!! lol

Mr Khan @ Apr 5th 2007 7:26PM

@ 23

might be a problem if you live in an apartment complex or a dorm or something, but i refuse to use Wireless Security on the grounds that the nearest possible receiver is well outside my router's range, unless my neighbors decided to take a laptop outside and sit out in their yard to surf

Why do people always hate on WiFi, it rules...