Analyses: hackers infect players of an old Call of Duty game with a worm that spreads in online lobbies; Activision turns off multiplayer for the game on Steam
Hackers are infecting players of an old Call of Duty game with a worm that spreads automatically in online lobbies, according to two analyses of the malware.
Context & Ripple Effects
This incident sits alongside earlier Call of Duty security coverage in which Activision warned that a purported Warzone cheat could install malware and give attackers control of a player's machine, highlighting how PC-game ecosystems can turn routine player activity into a delivery channel for malicious code.
The immediate shutdown also foreshadows the later takedown of Call of Duty: WWII's affected PC version after reports of compromised players' computers. Across the coverage, old multiplayer services emerge as a continuing security obligation rather than a static back catalog.
First-order effects
- Steam players of the affected older Call of Duty game lose multiplayer access while Activision removes the lobby-based path through which the worm spreads.
- Players who continued joining public lobbies faced an elevated risk of automatic infection; disabling the service is an immediate containment measure rather than a fix for already compromised machines.
Second-order effects
- Activision must weigh the cost of maintaining and patching legacy PC multiplayer against the safety and support burden of leaving it online; Steam becomes the visible distribution and access point for that decision.
- The case raises the operational bar for other publishers running older PC titles, especially where matchmaking or lobby connections can expose players to untrusted code. It follows prior warnings about malware disguised as a Warzone cheat, though the delivery mechanism here is more automatic.
Third-order effects
- If repeated, these incidents push legacy online games toward a lifecycle model in which multiplayer availability depends on ongoing security maintenance, not merely whether a title remains purchasable or installable.
- The later WWII shutdown suggests the issue is not isolated to one old release: publishers may increasingly treat vulnerable PC multiplayer as a service-risk problem requiring rapid restriction or removal, with preservation and player access as the trade-off.
The trend: Legacy PC multiplayer is becoming a persistent attack-surface and service-lifecycle challenge for game publishers.