Xbox Live players striking each other with denial-of-service attacks
By flooding another player's internet connection with data, attackers can kick him or her out of an XBL game.
Gaming | by Stephen Schenck | Fri Feb 20, 2009 11:32AM | 2 comments
What's the proper reaction to getting beaten in a game of Halo 3? Practice more? Play against some more novice opponents? Unfortunately, not everyone is as good a sport as we are, and apparently Xbox Live is being increasingly targeted by hacker tools that attack a player's internet connection, forcing him or her out of the game.
The disruptions are being caused by a type of denial-of-service attack. These hacks are normally leveraged against larger foes, like commercial web servers, using the internet connections of dozens, if not hundreds of machines, all trying to connect to the server at once. By overloading it with requests, the attacker effectively denies other users the use of its services.
On XBL, players looking to disrupt another's service just have to sniff out the target's IP address. Though XBL doesn't show the IPs of other players, it can be possible to determine by analyzing network logs, especially if the target is the one hosting a game. Armed with that piece of information, an attacker uses a PC tool to coordinate the attack. In order to create enough traffic to disrupt the victim's connection, the tool lets the attacker rent time on a botnet, an illegal underground network of computers that have been compromised by malware, putting them under the control of a hacker. By paying to access a large group of these machines, the attacker has enough bandwidth under his control to quickly knock his target off of XBL.
The sad thing isn't just that there are people taking their games so seriously that they risk jail time just to get revenge on other players, but that there's little to be done about the situation. Tools to mitigate the effect of DoS attacks are expensive and not well suited for use by the average user at home. Microsoft could shield players from each others' IPs by routing all traffic through it's own servers, but there's no indication it's willing to take that very expensive step.
This story around the web:
- Trusted sources:
Hackers target Xbox Live players [BBC News | Technology | UK Edition]
Microsoft investigating Xbox Live hackers [TechRadar]
Hackers booting people off of Xbox Live [Megite Technology News: What's Happening Right Now]
Hackers target Xbox Live players (BBC) [Techmeme]
Hackers Targeting Xbox Live Gamers [Gearlog]
Hackers target Xbox Live players [Megite Technology News: What's Happening Right Now]
Get more information on topics relating to this story:
- Related company news:
- Microsoft
- Related glossary terms:
- Xbox LIVE, IP address, Denial of service
- Related brand news:
- Microsoft Xbox 360
- Related devices and services:
- Microsoft Xbox 360 Pro





Big Nexus One update includes 3G fix, multi-touch, Google Goggles image-based search
Comments (2)
Add a comment Inappropriate or promotional comments may be removed.
Anonymous (7:56 PM on Sun Mar 15, 2009)
Word to the wise, ITS JUST A GAME
Anonymous (4:35 AM on Sun Apr 19, 2009)
Tell that to the MLG!