LoL SEA client bloated with CoinHive

Hooked or Juked·Jul 10, 2018·1 votes·2,251 views

There is a provlem going on now in the entire LoL SEA. Our LOL Client is being used as a Monero Mining. Ones we open our Client (PH), our CPU usage skyrockets to 90-100%. Our antiviruses blocks LoLclients and detects a ip address which is connected to CoinHive. Online hackers can penetrate to our systems. I wish that any Rioter would solve this issue.

See more here:

https://bit.ly/2NE8KKp

UPDATE: LoL PH post a statement on their Facebook Page ( https://goo.gl/mmxHDG )

"On July 9, 2:16 PM GMT+8, there was an unauthorized modification of the League of Legends PH client lobby where a certain javascript code was inserted. This code performs blockchain mining on affected computers, which consumes CPU resources from these computers. Apart from increased CPU usage, extensive analysis from our security engineers has determined that there is no other impact on affected computers. At July 11, 4:15 AM GMT+8, our security engineers have removed this javascript code and ensure that all users, including those who were previously affected, will no longer encounter this issue.

We treat security matters with utmost priority and sincerely apologize for this incident, and for the inconvenience you have experienced.

Should you have any questions or concerns you email us at [email protected]_"

p.s. i think they should not treat this problem like nothing. Riot should do something about this. This problem is not new. it is added a month ago so the are using us to mine xD

pp.ss. i also think that this is not a accident. how can it be an accidet cause you need to code the javascript.

6 Comments

MetaCosmosJul 10, 20181 votes

Second time that a SEA dev has been involved in a scandal. Sad that devs in that region are so shady.

Hooked or JukedJul 11, 20181 votes

{quoted}

Second time that a SEA dev has been involved in a scandal. Sad that devs in that region are so shady.

What's the first and when?

MetaCosmosJul 11, 20181 votes

[{quoted}](name=Hooked or Juked,realm=NA,application-id=yrc23zHg,discussion-id=4PqEjLmk,comment-id=00000000,timestamp=2018-07-11T10:21:34.137+0000)

What's the first and when?

Wasn't league. A Pearl Abyss dev in SEA got caught logging in to the BDO servers while the game was offline to buy things off the marketplace before anyone else got a chance to.

Zac x MeJul 11, 20181 votes

When you don't host and manage all servers yourself.

Hooked or JukedJul 11, 20181 votes

UPDATE: LoLPH Admin: On July 9, 2:16 PM GMT+8, there was an unauthorized modification of the League of Legends PH client lobby where a certain javascript code was inserted. This code performs blockchain mining on affected computers, which consumes CPU resources from these computers. Apart from increased CPU usage, extensive analysis from our security engineers has determined that there is no other impact on affected computers. At July 11, 4:15 AM GMT+8, our security engineers have removed this javascript code and ensure that all users, including those who were previously affected, will no longer encounter this issue.

We treat security matters with utmost priority and sincerely apologize for this incident, and for the inconvenience you have experienced.

Should you have any questions or concerns you email us at [email protected] #

nice huh. how did CoinHive infect LoLPH :thinking: