Following Rainbow Six Siege hack, report emerges about bribes with Ubisoft customer support

The Rainbow Six Siege incident is grabbing headlines, but it’s not the only example of hackers infiltrating Ubisoft. Vx Underground, a trusted cybersecurity source, has revealed another security breach. While not related to the Rainbow Six Siege hack, the company’s support desk reportedly accepted bribes in exchange for customer information.

VX Underground details how Ubisoft’s customer support has become a point of weakness. Since 2021, they “were allegedly accepting monetary bribes to give access to other users' Rainbow Six Siege accounts.” Via the customer service panel, hackers obtained data like full names and IP addresses.

Once bad actors control accounts, the potential for damage is massive. Done on a large scale, they can cause the havoc that prompted the recent shutdown of the Rainbow Six Siege servers. The company has taken measures to address employees' willingness to cooperate. Even so, the problem remains an ongoing concern for the publisher.

The social media post explains how agents from India, South Africa, and Egypt proved particularly vulnerable. As seen with the PlayStation Network, hackers target underpaid or undertrained workers. Bribes seem more lucrative while other staff lack the experience to detect suspicious activity.

Social engineering preys on naive support agents

One popular theory to explain the latest Rainbow Six Siege hack is a database security breach. Still, a FastPassCorp article highlights that humans pose a greater risk. Social engineering can take the form of a hacker impersonating a customer support agent or gamer. Even if firewalls stand strong, it’s often these employees who fail to recognize a threat.

Ubisoft games have been subject to major attacks numerous times, including in 2013 and 2023. Yet help desks have proven to be easier marks for cybercriminals. In one example discussed by Vice, an individual successfully bribed Roblox support in 2020. Similar to the new story told by VX Underground, the person was able to change passwords and sell valuable accounts.