Dark Souls 3 Exploit Allows Hackers to Take Complete Control of Your PC

According to a report from Dexerto, a hazardous remote code execution (RCE) exploit uncovered in Dark Souls 3 might allow a malicious actor to take control of your computer. Only PC gamers who play online are affected by the flaw, which might harm Dark Souls, Dark Souls 2, and the forthcoming Elden Ring. As a result, servers for many Dark Souls games have been shut down.

The vulnerability was demonstrated during The Grim Sleeper’s Dark Souls 3 Twitch stream. The Grim Sleeper’s game fails near the conclusion of the stream (1:20:22), and the artificial voice from Microsoft’s text-to-speech synthesizer begins condemning his gaming. The Grim Sleeper then claims that Microsoft PowerShell opened by itself, indicating that the application was utilized by a hacker to run a script that activated the text-to-speech capability.

However, it’s unlikely that this was a hostile hacker; a screenshot from the SpeedSouls’ Discord channel may expose the “hacker’s” true motives. According to the message, the “hacker” was aware of the flaw and sought to inform FromSoftware, the creator of Dark Souls. He was apparently ignored, so he began pranking streamers to attract attention to the issue.

However, if a bad actor had found the flaw first, the consequences may have been even worse. According to Kaspersky, RCE is one of the most deadly vulnerabilities. It enables hackers to install harmful programs on their victim’s computer, causing irreversible damage and perhaps stealing important data.

The RCE vulnerability has subsequently been patched with Blue Sentinel, a community-made anti-cheat mod for Dark Souls 3. Two of the four persons who know how to perform the RCE hack are Blue Sentinel devs, while the other two are people “who worked on it,” potentially referring to the people who helped find the flaw, according to a post on the r/darksouls3 subreddit.

“Thanks very much for the ping, a report on this matter was filed to the relevant internal teams earlier today, the information is highly appreciated!” a representative for Bandai Namco, Dark Souls’ publisher, remarked on a Reddit post in response to the issue. The Verge reached out to Bandai Namco for comment, but did not receive a response right away.

Fortunately, it appears like FromSoftware and Bandai Namco are working on a solution. PvP servers for Dark Souls: Remastered, Dark Souls 2, and Dark Souls 3 have been temporarily stopped down, according to the Dark Souls Twitter account, “to allow the team to address recent allegations of an issue with online services.” The servers for Dark Souls: Prepare to Die Edition will likewise be decommissioned soon, according to the statement. This solely affects PC users; you may still play online if you’re using a PlayStation or Xbox. There’s no news on when the servers will be operational again.

Related Articles

LEAVE A REPLY

Please enter your comment!
Please enter your name here

- Advertisement -spot_img

Latest Articles