The $1 million XSE Pro League Counter-Strike 2 LAN in Guangzhou, China descended into disarray this month after organizers' technical failures exposed professional players to malicious software on tournament-provided practice computers. Multiple players discovered spyware and remote access trojans on machines they had been using to prepare between matches, adding a serious security breach to an event already marked by broadcast failures, scheduling delays, and a building-wide power outage.
Practice PCs Found Loaded With Spyware
At the center of the controversy is the discovery that practice computers made available to competing rosters were running malicious software capable of far more than simple disruption. Players who examined the machines found a remote access trojan, or RAT, on the systems. Tools of this kind allow an outside party to quietly harvest saved browser passwords, hijack active session tokens well enough to slip past two-factor authentication, and reach into cryptocurrency wallets stored on the infected device. BetBoom was directly affected. Rifler Kirill "Magnojez" Rodnov and in-game leader Aleksandr "zorte" Zagodyrenko both used the compromised computers during the event. Magnojez says he lost access to his Steam account, and he believes signing in on the tainted hardware is what caused it. For a competitive player, losing a Steam account can mean losing inventory, competitive history, and the primary login tied to a career's worth of digital assets — underscoring how serious the fallout could be beyond the tournament itself.
An SSD Failure Started the Chain Reaction
The security lapse did not occur in a vacuum. According to accounts from the event, the problem traces back to BIG, whose own tournament-issued solid-state drives failed during the competition. With their designated storage no longer usable, players from the team were pushed onto alternative practice PCs supplied by the venue rather than equipment they controlled or could vet themselves. It was on these substitute machines that the malicious software was later found. What began as a hardware malfunction effectively became the entry point for a much larger security failure, one that put competitors' personal accounts and financial tools at risk simply because they had no safer alternative to practice on.
Delays, Broken Broadcasts, and a Power Outage
The malware discovery arrived amid a broader pattern of mismanagement that plagued the LAN from its outset. The tournament's opening was pushed back by close to two hours, and once matches got underway, viewers watching the broadcast were met with audio that repeatedly cut out or malfunctioned. On-screen graphics compounded the problem, displaying incorrect names for competing players during live matches. Some competitors also arrived to find that the games they were scheduled to play had not even been installed on their assigned systems, forcing last-minute scrambles before matches could begin. The chaos escalated further when a transformer explosion knocked out power to the venue, halting the event entirely for roughly an hour while the building's electrical systems were restored. Compounding all of this, the officials responsible for running the tournament floor were reportedly university student volunteers with no previous experience managing a LAN event of this scale, leaving a $1 million tournament without the experienced operational staff typically expected at a top-tier Counter-Strike 2 event. Taken together, the malware exposure and the cascade of production and logistical breakdowns made the XSE Pro League LAN as notable for its failures as for its $1 million prize pool. With players' personal accounts caught up in the fallout, the event underscores how much can go wrong when the security of practice equipment at a LAN goes unchecked.
Join the conversation — sign in to comment.
Sign in
