Online game from PlayerUnknown’s Battlegrounds dev let players send malware via in-game chat

Here’s something new (and very worrying) in the world of online gaming: Tera, an MMORPG (massively multiplayer online RPG) produced by the same developer responsible for PlayerUnknown's Battlegrounds, had its in-game chat shut down over the weekend following revelations that it could be used as a medium to spread all sorts of malicious nastiness including viruses.

Developer Bluehole launched Tera back in 2011 in South Korea, and it followed to North America and Europe in 2012. It’s an online RPG with combat that plays out like an FPS, but panic struck over the weekend when the game servers were brought down for emergency maintenance to fix a gaping chat-related vulnerability.

Players themselves actually highlighted the flaw in Tera’s chat system, which apparently utilizes HTML, and could reportedly be exploited to bombard other players with dodgy images or links, collect user IP addresses, or even remotely execute malware.

As if MMORPG public chat channels weren’t toxic enough already.

The game’s North American publisher, En Masse, noted at the time: “There are very serious claims floating around of what this vulnerability potentially allows malicious users to do. We are taking these claims very seriously but, as of this time, we have no evidence that the vulnerability is being exploited in these ways or that any player information has been compromised.”

Fixing a hole

En Masse investigated the issue in conjunction with Bluehole, resulting in all chat being disabled save for guild chat last Friday, with the fix subsequently being deployed on Saturday at around 8:00 PST time in the US. Gameforge, the EU publisher, applied the fix on Friday at 16:00 UK time, a day earlier.

So the issue was dealt with fairly swiftly, as you’d hope, although by all accounts players had their game settings reset by the hotfix. Still, better that than a surprise virus arriving via a chat channel…

This is definitely a bit of an eye-opener and a cautionary tale for developers everywhere, for sure, in terms of security considerations when it comes to in-game systems.

And of course it’s particularly interesting that while Tera is hardly a big-name game, its developer is a big fish these days, and the force behind the juggernaut PlayerUnknown's Battlegrounds.

Via: Engadget

Darren is a freelancer writing news and features for TechRadar (and occasionally T3) across a broad range of computing topics including CPUs, GPUs, various other hardware, VPNs, antivirus and more. He has written about tech for the best part of three decades, and writes books in his spare time (his debut novel - 'I Know What You Did Last Supper' - was published by Hachette UK in 2013).

Latest in Gaming
Hornet swings their weapon in mid air
Hollow Knight: Silksong gets new Steam metadata changes, convincing everyone and their mother that the game is finally releasing this year
Monster Hunter Wilds
Monster Hunter Wilds Title Update 1 launches in early April, adding new monsters and some of the best-looking armor sets I need to add to my collection
Four operators survey Verdansk. One holds a sniper rifle, one binoculars, another holds is landing with their parachute, while the last wears a skull mask
New Call of Duty: Warzone trailer shows a beautiful rebuilt Verdansk, but some fans want more: 'it won't be the same unfortunately'
Marvel Rivals
Marvel Rivals will get two new hero skins for Moon Knight and Black Panther this week meaning I'll now need to farm even more Units
A close up of the PlayStation symbol at the top of a PS5 Slim console with a white brick background
Sony has dropped a new PS5 update, improving activities and adding more emoji support
The RIG M2 Streamstar attached to a boom arm.
The RIG M2 Streamstar has the world's first Bluetooth audio gateway in a wired gaming microphone
Latest in News
DeepSeek
Deepseek’s new AI is smarter, faster, cheaper, and a real rival to OpenAI's models
Open AI
OpenAI unveiled image generation for 4o – here's everything you need to know about the ChatGPT upgrade
Apple WWDC 2025 announced
Apple just announced WWDC 2025 starts on June 9, and we'll all be watching the opening event
Hornet swings their weapon in mid air
Hollow Knight: Silksong gets new Steam metadata changes, convincing everyone and their mother that the game is finally releasing this year
OpenAI logo
OpenAI just launched a free ChatGPT bible that will help you master the AI chatbot and Sora
An aerial view of an Instavolt Superhub for charging electric vehicles
Forget gas stations – EV charging Superhubs are using solar power to solve the most annoying thing about electric motoring