It was revealed earlier this week that a new exploit kit for Xbox One was released, and it’s being widely used by cybercriminals.
The new exploit, dubbed the PS4 Xeplorer exploit, was released by Russian security firm Malwarebytes on Wednesday, and has since been seen by more than 20,000 users.
The PS4 xeplore exploit allows attackers to install malware onto the PS3 and Xbox 360 consoles via USB sticks, enabling them to remotely launch games from the PC without the need for a PS3 or Xbox 360 password.
The exploit was first spotted by The Daily Dot on Wednesday and has been downloaded over 100,000 times by users on the exploit forum.
Users can download the PSxer exploit kit from the MalwareBytes website.
Malwarewarebytes released the PS xe-psxer, a modified version of the PSXer exploit that includes support for the PS5 console.
The tool allows for the execution of PS4 code on Xbox One consoles, and allows the attacker to access remote code execution (RCE) capabilities on the PSN and Steam service.
The exploits use the Xbox Live API to run on the Xbox 360 console and allow for the remote execution of Xbox apps, as well as code execution on Windows PCs.
Malwarebytes said the exploit kit is a compromise of an existing vulnerability in Xbox Live.
“The PSxest exploit kit allows for exploitation of the following vulnerabilities to bypass sandbox protections on the XEPSR: Xbox Live Protected Content (XP), XEPLorer (XPE), Xeplay (XEPS), and Xept (XEP),” the company said in a blog post.
“The PSXest exploit is only available in English.”
In addition to the PS 4 exploit kit, Malwarewords also published a PSXen exploit kit that allows for remote execution on the PlayStation 4 console and on the PC, while the PS Xe exploit kit includes support to bypass Windows firewall restrictions.
The Xbox Live XEplorer and PSxen exploits are both hosted on the Malicious code repository, and are also available in German, French, Spanish, Russian, and Italian.
The PSxes exploit kit and the PSen exploit are also hosted on Maliciouscode, while Malwarecode hosts both the Xbox and PC exploits.
Maliciouscode has also released a new Windows and Mac exploit kit.