AI Chat Bots Infiltrate League of Legends Friend Requests to Push Adult‑Content Links
What Happened — Players of Riot’s League of Legends have reported receiving friend requests from newly‑created or stolen accounts immediately after a match ends. The bots open a flirty conversation, move the dialogue to Discord, and ultimately share a paid‑subscription (OnlyFans) link. The script is identical across dozens of accounts, indicating an AI‑generated, large‑scale social‑engineering operation.
Why It Matters for Compliance & Audit Readiness
- SOC 2 A‑5 (Security) and CC 6.2 (System Operations) require documented controls against unauthorized access and social‑engineering attacks; this campaign shows a gap in user‑awareness and access‑control enforcement.
- Continuous‑compliance programs must capture evidence of security‑awareness training and policy adherence to demonstrate due diligence during audits.
- The incident illustrates the need for real‑time monitoring of outbound communications (e.g., friend‑request patterns) as audit‑ready evidence of control effectiveness.
Who Is Affected – Gaming platforms, esports communities, and any consumer‑facing SaaS that supports in‑app friend or chat requests (e.g., entertainment, media, and social‑gaming vendors).
Recommended Actions
- Update security‑awareness curricula to include AI‑driven social‑engineering scenarios specific to gaming and community platforms.
- Enforce MFA and device‑binding for all privileged or high‑visibility accounts; flag throwaway accounts with no match history.
- Deploy automated monitoring of friend‑request spikes and outbound link sharing; retain logs as SOC 2 evidence.
- Review and tighten outbound communication policies (e.g., disallow unsolicited external links from in‑app messages).
Source: Malwarebytes Labs
Technical Notes – The bots use AI‑generated text and image‑generation to personalize flirtation scripts, then employ prompt‑injection techniques to evade detection. No known CVE; the vector is a mis‑use of Riot’s friend‑request feature and subsequent migration to Discord. Source: same as above