{"id":24446,"date":"2019-01-16T14:13:05","date_gmt":"2019-01-16T14:13:05","guid":{"rendered":"https:\/\/www.threatshub.org\/blog\/epics-fortnite-fail-ancient-ut2004-server-used-for-login-stealing-proof-of-concept\/"},"modified":"2019-01-16T14:13:05","modified_gmt":"2019-01-16T14:13:05","slug":"epics-fortnite-fail-ancient-ut2004-server-used-for-login-stealing-proof-of-concept","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/epics-fortnite-fail-ancient-ut2004-server-used-for-login-stealing-proof-of-concept\/","title":{"rendered":"Epic&#8217;s Fortnite fail: Ancient UT2004 server used for login-stealing proof-of-concept"},"content":{"rendered":"<div><img decoding=\"async\" src=\"https:\/\/regmedia.co.uk\/2018\/08\/03\/fornite.jpg\" class=\"ff-og-image-inserted\"\/><\/div>\n<p>Crafty infosec bods exploited XSS vulns on dusty corners of Epic Games\u2019 web infrastructure to steal Fortnite gamers\u2019 login tokens and compromise their accounts \u2013 using a genuine Epic Games URL to phish their marks.<\/p>\n<p>Infosec biz Check Point discovered the XSS vuln, which, when combined with a login redirect attack, had the potential to let a mischief-maker gain access to user accounts without having to trick targets into handing over usernames and passwords.<\/p>\n<p>Check Point\u2019s proof-of-concept even used a completely genuine *.epicgames.com URL as a phishing vector.<\/p>\n<p>Researchers discovered that dusty corners of Epic\u2019s web infrastructure were vulnerable to a combination of the XSS vuln and a SQL injection attack, allowing them to compromise Epic\u2019s social media account single sign-on implementation.<\/p>\n<p>They did all of this by exploiting an old Unreal Tournament 2004 server.<\/p>\n<h3 class=\"crosshead\"><span>How?!<\/span><\/h3>\n<p>Epic\u2019s online login process for Fortnite includes a URL string with the parameter \u201credirectedUrl\u201d, bouncing the user around a couple of times before settling on account.epicgames.com. Check Point researchers found that they could successfully change that initial redirect URL to point to anything that included *.epicgames.com.<\/p>\n<p>This was where the vulnerable UT2004 subdomain came in. The old stats site was vulnerable to a SQL injection attack, Check Point found, which allowed the miscreants to plant an XSS payload on the server.<\/p>\n<p>Older readers will remember the classic Unreal Tournament line of PC-based first-person shoot-em-ups. For excellent reasons that include allowing upper-bracket millennials to relive their misspent youths, Epic \u2013 publisher of Unreal as well as Fortnite \u2013 kept some of the old UT2004 infrastructure online, including the multiplayer game stats server.<\/p>\n<p>Unfortunately for Epic, Check Point discovered that the since-patched server (which is no longer publicly accessible) would execute certain SQL queries, though some locking-down had been done by Epic. Check Point planted its Javascript XSS payload on ut2004stats.epicgames.com, having written it to include three encoded JSON keys: \u201credirectUrl\u201d, \u201cclient_id\u201d and \u201cprodectName\u201d.<\/p>\n<h3 class=\"crosshead\"><span>XSS + Javascript payload = bad news<\/span><\/h3>\n<p>Epic uses multiple SSO providers to let eager gamers log on with the social media account of their choice, including Facebook, PlayStationNetwork\/PSN, Xbox Live, Nintendo and even Google+. The Javascript payload \u201ccould then make a request to any SSO provider\u201d, as Check Point said, though it only tested Facebook.<\/p>\n<p>Epic\u2019s implementation of SSO was provider-agnostic; any of the named vendors would respond to a valid token request. One of the parameters in that request is named \u201cstate\u201d. By rewriting one of the keys in the <em>state<\/em> parameter to point at their compromised ut2004stats.epicgames.com server, Check Point\u2019s researchers could capture the generated SSO token and send that to Epic\u2019s (legitimate) server to finish the login authentication process.<\/p>\n<p>\u201cIn response, Epic Games\u2019 server generates a response with no input validation and redirects the user to &#8220;ut2004stats.epicgames.com&#8221; with the XSS payload and the SSO token,\u201d said Check Point in its writeup of the exploit.<\/p>\n<p>From that point, it was straightforward to extract the token from the request and send it to an attack-controlled server for later exploitation.<\/p>\n<p>As reported at great length on other news websites, the implications of this are that user accounts could be stolen by socially engineering users to click on a *.epicgames.com URL that would have passed muster as a genuine Epic Games-controlled site. All the attacker would have to do is hope the user logged in using a set of OAuth SSO creds.<\/p>\n<p>Given that Fortnite is very popular amongst kids, that kind of social engineering would probably not be difficult \u2013 pinging a URL around via Fortnite in-game text chat promising free game credits (V-Bucks) is one method Check Point suggested.<\/p>\n<p>Once in control of a compromised account, attackers could then read a user\u2019s registered data from the account settings page, impersonate the user, start video chats with other gamers, and so on.<\/p>\n<p>Epic has patched the vulns, according to Check Point, which disclosed them to the game publisher before going public. \u00ae<\/p>\n<p>READ MORE <a href=\"http:\/\/go.theregister.com\/feed\/www.theregister.co.uk\/2019\/01\/16\/fortnite_security_vuln_token_theft\/\">HERE<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>A tale of XSS, SQL injection and OAuth implementation Crafty infosec bods exploited XSS vulns on dusty corners of Epic Games\u2019 web infrastructure to steal Fortnite gamers\u2019 login tokens and compromise their accounts \u2013 using a genuine Epic Games URL to phish their marks.\u2026 READ MORE HERE&#8230;<\/p>\n","protected":false},"author":2,"featured_media":24447,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"colormag_page_layout":"default_layout","footnotes":""},"categories":[63],"tags":[],"class_list":["post-24446","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-the-register"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.1 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Epic&#039;s Fortnite fail: Ancient UT2004 server used for login-stealing proof-of-concept 2026 | ThreatsHub Cybersecurity News<\/title>\n<meta name=\"description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security &amp; Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.threatshub.org\/blog\/epics-fortnite-fail-ancient-ut2004-server-used-for-login-stealing-proof-of-concept\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Epic&#039;s Fortnite fail: Ancient UT2004 server used for login-stealing proof-of-concept 2026 | ThreatsHub Cybersecurity News\" \/>\n<meta property=\"og:description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security &amp; Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.threatshub.org\/blog\/epics-fortnite-fail-ancient-ut2004-server-used-for-login-stealing-proof-of-concept\/\" \/>\n<meta property=\"og:site_name\" content=\"ThreatsHub Cybersecurity News\" \/>\n<meta property=\"article:published_time\" content=\"2019-01-16T14:13:05+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2019\/01\/epics-fortnite-fail-ancient-ut2004-server-used-for-login-stealing-proof-of-concept.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"648\" \/>\n\t<meta property=\"og:image:height\" content=\"348\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"TH Author\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@threatshub\" \/>\n<meta name=\"twitter:site\" content=\"@threatshub\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"TH Author\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/epics-fortnite-fail-ancient-ut2004-server-used-for-login-stealing-proof-of-concept\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/epics-fortnite-fail-ancient-ut2004-server-used-for-login-stealing-proof-of-concept\\\/\"},\"author\":{\"name\":\"TH Author\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\"},\"headline\":\"Epic&#8217;s Fortnite fail: Ancient UT2004 server used for login-stealing proof-of-concept\",\"datePublished\":\"2019-01-16T14:13:05+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/epics-fortnite-fail-ancient-ut2004-server-used-for-login-stealing-proof-of-concept\\\/\"},\"wordCount\":681,\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/epics-fortnite-fail-ancient-ut2004-server-used-for-login-stealing-proof-of-concept\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2019\\\/01\\\/epics-fortnite-fail-ancient-ut2004-server-used-for-login-stealing-proof-of-concept.jpg\",\"articleSection\":[\"The Register\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/epics-fortnite-fail-ancient-ut2004-server-used-for-login-stealing-proof-of-concept\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/epics-fortnite-fail-ancient-ut2004-server-used-for-login-stealing-proof-of-concept\\\/\",\"name\":\"Epic's Fortnite fail: Ancient UT2004 server used for login-stealing proof-of-concept 2026 | ThreatsHub Cybersecurity News\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/epics-fortnite-fail-ancient-ut2004-server-used-for-login-stealing-proof-of-concept\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/epics-fortnite-fail-ancient-ut2004-server-used-for-login-stealing-proof-of-concept\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2019\\\/01\\\/epics-fortnite-fail-ancient-ut2004-server-used-for-login-stealing-proof-of-concept.jpg\",\"datePublished\":\"2019-01-16T14:13:05+00:00\",\"description\":\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/epics-fortnite-fail-ancient-ut2004-server-used-for-login-stealing-proof-of-concept\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/epics-fortnite-fail-ancient-ut2004-server-used-for-login-stealing-proof-of-concept\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/epics-fortnite-fail-ancient-ut2004-server-used-for-login-stealing-proof-of-concept\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2019\\\/01\\\/epics-fortnite-fail-ancient-ut2004-server-used-for-login-stealing-proof-of-concept.jpg\",\"contentUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2019\\\/01\\\/epics-fortnite-fail-ancient-ut2004-server-used-for-login-stealing-proof-of-concept.jpg\",\"width\":648,\"height\":348},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/epics-fortnite-fail-ancient-ut2004-server-used-for-login-stealing-proof-of-concept\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Epic&#8217;s Fortnite fail: Ancient UT2004 server used for login-stealing proof-of-concept\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"name\":\"ThreatsHub Cybersecurity News\",\"description\":\"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"alternateName\":\"Threatshub.org\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\",\"name\":\"ThreatsHub.org\",\"alternateName\":\"Threatshub.org\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"contentUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"width\":432,\"height\":435,\"caption\":\"ThreatsHub.org\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/threatshub\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\",\"name\":\"TH Author\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"caption\":\"TH Author\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Epic's Fortnite fail: Ancient UT2004 server used for login-stealing proof-of-concept 2026 | ThreatsHub Cybersecurity News","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.threatshub.org\/blog\/epics-fortnite-fail-ancient-ut2004-server-used-for-login-stealing-proof-of-concept\/","og_locale":"en_US","og_type":"article","og_title":"Epic's Fortnite fail: Ancient UT2004 server used for login-stealing proof-of-concept 2026 | ThreatsHub Cybersecurity News","og_description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","og_url":"https:\/\/www.threatshub.org\/blog\/epics-fortnite-fail-ancient-ut2004-server-used-for-login-stealing-proof-of-concept\/","og_site_name":"ThreatsHub Cybersecurity News","article_published_time":"2019-01-16T14:13:05+00:00","og_image":[{"width":648,"height":348,"url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2019\/01\/epics-fortnite-fail-ancient-ut2004-server-used-for-login-stealing-proof-of-concept.jpg","type":"image\/jpeg"}],"author":"TH Author","twitter_card":"summary_large_image","twitter_creator":"@threatshub","twitter_site":"@threatshub","twitter_misc":{"Written by":"TH Author","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.threatshub.org\/blog\/epics-fortnite-fail-ancient-ut2004-server-used-for-login-stealing-proof-of-concept\/#article","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/epics-fortnite-fail-ancient-ut2004-server-used-for-login-stealing-proof-of-concept\/"},"author":{"name":"TH Author","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476"},"headline":"Epic&#8217;s Fortnite fail: Ancient UT2004 server used for login-stealing proof-of-concept","datePublished":"2019-01-16T14:13:05+00:00","mainEntityOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/epics-fortnite-fail-ancient-ut2004-server-used-for-login-stealing-proof-of-concept\/"},"wordCount":681,"publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/epics-fortnite-fail-ancient-ut2004-server-used-for-login-stealing-proof-of-concept\/#primaryimage"},"thumbnailUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2019\/01\/epics-fortnite-fail-ancient-ut2004-server-used-for-login-stealing-proof-of-concept.jpg","articleSection":["The Register"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.threatshub.org\/blog\/epics-fortnite-fail-ancient-ut2004-server-used-for-login-stealing-proof-of-concept\/","url":"https:\/\/www.threatshub.org\/blog\/epics-fortnite-fail-ancient-ut2004-server-used-for-login-stealing-proof-of-concept\/","name":"Epic's Fortnite fail: Ancient UT2004 server used for login-stealing proof-of-concept 2026 | ThreatsHub Cybersecurity News","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/epics-fortnite-fail-ancient-ut2004-server-used-for-login-stealing-proof-of-concept\/#primaryimage"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/epics-fortnite-fail-ancient-ut2004-server-used-for-login-stealing-proof-of-concept\/#primaryimage"},"thumbnailUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2019\/01\/epics-fortnite-fail-ancient-ut2004-server-used-for-login-stealing-proof-of-concept.jpg","datePublished":"2019-01-16T14:13:05+00:00","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","breadcrumb":{"@id":"https:\/\/www.threatshub.org\/blog\/epics-fortnite-fail-ancient-ut2004-server-used-for-login-stealing-proof-of-concept\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.threatshub.org\/blog\/epics-fortnite-fail-ancient-ut2004-server-used-for-login-stealing-proof-of-concept\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/epics-fortnite-fail-ancient-ut2004-server-used-for-login-stealing-proof-of-concept\/#primaryimage","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2019\/01\/epics-fortnite-fail-ancient-ut2004-server-used-for-login-stealing-proof-of-concept.jpg","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2019\/01\/epics-fortnite-fail-ancient-ut2004-server-used-for-login-stealing-proof-of-concept.jpg","width":648,"height":348},{"@type":"BreadcrumbList","@id":"https:\/\/www.threatshub.org\/blog\/epics-fortnite-fail-ancient-ut2004-server-used-for-login-stealing-proof-of-concept\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.threatshub.org\/blog\/"},{"@type":"ListItem","position":2,"name":"Epic&#8217;s Fortnite fail: Ancient UT2004 server used for login-stealing proof-of-concept"}]},{"@type":"WebSite","@id":"https:\/\/www.threatshub.org\/blog\/#website","url":"https:\/\/www.threatshub.org\/blog\/","name":"ThreatsHub Cybersecurity News","description":"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform","publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"alternateName":"Threatshub.org","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.threatshub.org\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.threatshub.org\/blog\/#organization","name":"ThreatsHub.org","alternateName":"Threatshub.org","url":"https:\/\/www.threatshub.org\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","width":432,"height":435,"caption":"ThreatsHub.org"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/threatshub"]},{"@type":"Person","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476","name":"TH Author","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","caption":"TH Author"}}]}},"_links":{"self":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/24446","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/comments?post=24446"}],"version-history":[{"count":0,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/24446\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media\/24447"}],"wp:attachment":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media?parent=24446"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/categories?post=24446"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/tags?post=24446"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}