Research by Check Point has uncovered serious vulnerabilities in the user login process of Fortnite, the immensely popular online battle royale game. The flaws, which have recently been patched, could enable attackers to manipulate the login process by means of a phishing link, in order to steal users’ login credentials and access their accounts.

After taking control of a user account, threat actors would have access to the user’s personal information and the audio stream from the victim’s microphone during a game. Hackers could also buy Fortnite currency using the payment information linked to a compromised account.

Read more: Fortnite vulnerabilities would have allowed attackers to intercept and steal login credentials