"Phishers Take Over FIFA 22 Accounts"
Cybercriminals are using social engineering attacks to take over accounts belonging to players of the Electronic Arts video game FIFA 22. While the gaming giant’s investigation into the attacks remains ongoing, Electronics Arts estimates that fewer than 50 accounts have been taken over through a combination of phishing techniques and mistakes made by its customer experience team. Electronic Arts Sports FIFA team stated that adversaries were able to exploit human error within their customer experience team and bypass two-factor authentication to gain access to player accounts. Since discovering the cybercriminal activity, Electronic Arts has put all its advisors and individuals who assist with the service of EA accounts through individualized re-training and additional team training, with a specific emphasis on account security practices and the phishing techniques used by the adversaries. The company said it is also implementing additional steps to the account ownership verification process, such as mandatory managerial approval for all email change requests. In addition, Electronic Arts said it would be updating the software used by its customer experience to better identify suspicious activity, flag at-risk accounts, and slash the risk of human error in the account update process.