Apex Legends hit by security incident, Respawn investigates player hijacking

As reported by Bleeping Computer, Apex Legends players experienced significant disruptions over the weekend as malicious actors gained unauthorized control of their in-game characters, leading to disconnections and altered usernames. The popular battle royale title, which maintains a substantial player base with an estimated half a million daily concurrent players, became the target of a security incident.

Players began reporting issues as early as Friday, with accounts of external actors taking over character inputs, attempting to move characters off the map, and displaying unusual in-game behavior. Respawn, the game's publisher, acknowledged the problem on Saturday, stating it was an active security incident where a "bad actor" could remotely control another player's inputs. The company initially reassured players that evidence did not suggest a code execution or injection attack. However, some players speculated that an individual with administrative privileges accessed the server's debugging system, enabling cheats and exploits. Many reported seeing "RSPN Admin" as the username for disconnected teammates.

Respawn announced the resolution of the incident approximately six hours after its acknowledgment, attributing it to cheats but offering no further details. This event highlights the ongoing challenges in anti-cheat measures within the gaming industry, emphasizing the importance of player reports in identifying and resolving such issues. The incident also raises concerns about game integrity and player trust, especially following a similar disruptive event during a North American competition last year that led to postponed finals and eroded community confidence.

Source: Bleeping Computer