Jan 07, 2025Ravie LakshmananCyber Attack / HackingInternet service providers (ISPs) and governmental entities in the Middle East have been targeted using an updated variant of the EAGERBEE malware framework.The new variant of EAGERBEE (aka Thumtais) comes fitted with various components that allow the backdoor to deploy additional payloads, enumerate file systems, and execute commands shells, demonstrating a significant evolution."The key plugins can be categorized in terms of their functionality into the following groups: Plugin Orchestrator, File System Manipulation, Remote Access Manager, Process Exploration, Network Connection Listing, and Service Management," Kaspersky researchers Saurabh Sharma and Vasily Berdnikov said in an analysis.The backdoor has been assessed by the Russian cybersecurity company with medium confidence to a threat group called CoughingDown.EAGERBEE was first documented by the Elastic Security Labs, attributing it to a state-sponsored and espionage-focused intrusion set dubbed REF5961. A "technically straightforward backdoor" with forward and reverse C2 and SSL encryption capabilities, it's designed to conduct basic system enumeration and deliver subsequent executables for post-exploitation.Subsequently, a variant of the malware was observed in attacks by a Chinese state-aligned threat cluster tracked as Cluster Alpha as part of a broader cyber espionage operation codenamed Crimson Palace with an aim to steal sensitive military and political secrets from a high-profile government organization in Southeast Asia.Cluster Alpha, per Sophos, overlaps with threat clusters tracked as BackdoorDiplomacy, REF5961, Worok, and TA428. BackdoorDiplomacy, for its part, is known to exhibit tactical similarities with another Chinese-speaking group codenamed CloudComputating (aka Faking Dragon), which has attributed to a multi-plugin malware framework referred to as QSC in attacks targeting the telecom industry in South Asia."QSC is a modular framework, of which only the initial loader remains on disk while the core and network modules are always in memory," Kaspersky noted back in November 2024. "Using a plugin-based architecture gives attackers the ability to control which plugin (module) to load in memory on demand depending on the target of interest."In the latest set of attacks involving EAGERBEE, an injector DLL is designed to launch the backdoor module, which is then used to collect system information and exfiltrate the details to a remote server to which a connection is established via a TCP socket.The server subsequently responds with a Plugin Orchestrator that, in addition to reporting system-related information to the server (e.g., NetBIOS name of the domain; physical and virtual memory usage; and system locale and time zone settings), harvests details about running processes and awaits further instructions -Receive and inject plugins into memoryUnload a specific plugin from memory, remove the plugin from the listRemove all plugins from the listCheck if the plugin is loaded or not"All the plugins are responsible for receiving and executing commands from the orchestrator," the researchers said, adding they perform file operations, manage processes, maintain remote connections, manage system services, and list network connections.Kaspersky said it also observed EAGERBEE being deployed in several organizations in East Asia, with two of them breached using the ProxyLogon vulnerability (CVE-2021-26855) to drop web shells that were then used to execute commands on the servers, ultimately leading to the backdoor deployment."Among these is EAGERBEE, a malware framework primarily designed to operate in memory," the researchers pointed out. "This memory-resident architecture enhances its stealth capabilities, helping it evade detection by traditional endpoint security solutions.""EAGERBEE also obscures its command shell activities by injecting malicious code into legitimate processes. These tactics allow the malware to seamlessly integrate with normal system operations, making it significantly more challenging to identify and analyze."Found this article interesting? Follow us on Twitter and LinkedIn to read more exclusive content we post.SHARE

Jan 07, 2025Ravie LakshmananCritical Infrastructure / Cyber AttackThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday said there are no indications that the cyber attack targeting the Treasury Department impacted other federal agencies.The agency said it's working closely with the Treasury Department and BeyondTrust to get a better understanding of the breach and mitigate its impacts."The security of federal systems and the data they protect is of critical importance to our national security," CISA said. "We are working aggressively to safeguard against any further impacts and will provide updates, as appropriate."The latest statement comes a week after the Treasury Department said it was the victim of a "major cybersecurity incident" that allowed Chinese state-sponsored threat actors to remotely access some computers and unclassified documents.The cyber attack, which came to light in early December 2024, involved a breach of BeyondTrust's systems that allowed the adversary to infiltrate some of the company's Remote Support SaaS instances by making use of a compromised Remote Support SaaS API key.In an updated statement on January 6, 2025, BeyondTrust said "no new customers have been identified beyond those we have communicated with previously." China has denied allegations that it breached the U.S. Treasury Department.Data shared by attack surface management company Censys shows that as many as 13,548 exposed BeyondTrust Remote Support and Privileged Remote Access instances have been observed online as of January 6.Last week, the Treasury Department's Office of Foreign Assets Control (OFAC) announced sanctions against a Chinese cybersecurity company, Integrity Technology Group, Incorporated, accusing it of lending infrastructure support to another hacking group called Flax Typhoon as part of a long-running campaign against U.S. critical infrastructure.The attack against the Treasury is the latest in a wave of intrusions perpetrated by Chinese threat actors such as Volt Typhoon and Salt Typhoon targeting U.S. critical infrastructure and telecommunications networks, respectively.The Wall Street Journal revealed over the weekend that among the nine telecom companies breached by Salt Typhoon are Charter Communications, Consolidated Communications, and Windstream. Some of the other entities previously identified included AT&T, T-Mobile, Verizon, and Lumen Technologies.In a new report published today, Bloomberg said the Chinese state-sponsored threat group dubbed APT41 penetrated the executive branch of the Philippines government and siphoned sensitive data related to disputes over the South China Sea as part of a yearslong campaign from early 2023 to June 2024.China Ramps Up Cyber Attacks on TaiwanThe developments also follow a report from Taiwan's National Security Bureau (NSB), warning of increasing sophistication of cyber attacks orchestrated by China against the country. A total of 906 cases of cyber incidents have been registered against government and private sector entities in 2024, up from 752 in 2023.The modus operandi entails typically exploiting vulnerabilities in Netcom devices and utilizing living-off-the-land (LotL) techniques to establish footholds, evade detection, and deploy malware for follow-on attacks and data theft. Alternative attack chains involve sending spear-phishing emails to Taiwanese civil servants.Other widely observed Chinese attacks against Taiwanese targets are listed below -Distributed denial-of-service (DDoS) attacks on transportation and financial sectors coinciding with military drills by the People's Liberation Army (PLA)Ransomware attacks on the manufacturing sectorTargeting high-tech startups to steal patented technologiesTheft of personal data of Taiwanese nationals to sell them on underground cybercrime forums.Criticism of Taiwan's cybersecurity capabilities on social media platforms to erode confidence in the government "Attacking the communications field, mainly telecommunications industry, has grown by 650%, and attacking the fields of transportation and defense supply chain have grown by 70% and 57%, respectively," the NSB said."By applying diverse hacking techniques, China has conducted reconnaissance, set cyber ambushes, and stolen data through hacking operations targeting Taiwan's government, critical infrastructure, and key private enterprises."The NSB has also called out China for conducting influence operations against Taiwan, conducting disinformation campaigns seeking to undermine public confidence in the government and heighten social divisions via social media platforms like Facebook and X.Notable among the tactics is the extensive use of inauthentic accounts to flood comment sections on social media platforms used by Taiwanese people to disseminate manipulated videos and meme images. Malicious cyber activities have also been found to hijack Taiwanese users' social media accounts to spread disinformation."China has been using deepfake technology to fabricate video clips of Taiwanese political figures' speeches, attempting to mislead the Taiwanese public's perception and understanding," the NSB said."In particular, China actively establishes convergence media brands or proxy accounts on platforms such as Weibo, TikTok, and Instagram, working to spread official media content and Taiwan-focused propaganda."Found this article interesting? Follow us on Twitter and LinkedIn to read more exclusive content we post.SHARE

Jan 07, 2025Ravie LakshmananVulnerability / Network SecurityTaiwan-based Moxa has warned of two security vulnerabilities impacting its cellular routers, secure routers, and network security appliances that could allow privilege escalation and command execution.The list of vulnerabilities is as follows -CVE-2024-9138 (CVSS 4.0 score: 8.6) - A hard-coded credentials vulnerability that could allow an authenticated user to escalate privileges and gain root-level access to the system, leading to system compromise, unauthorized modifications, data exposure, or service disruptionCVE-2024-9140 (CVSS 4.0 score: 9.3) - A vulnerability allows attackers to exploit special characters to bypass input restrictions, potentially leading to unauthorized command executionThe shortcomings, reported by security researcher Lars Haulin, affect the below products and firmware versions -CVE-2024-9138 - EDR-810 Series (Firmware version 5.12.37 and earlier), EDR-8010 Series (Firmware version 3.13.1 and earlier), EDR-G902 Series (Firmware version 5.7.25 and earlier), EDR-G902 Series (Firmware version 5.7.25 and earlier), EDR-G9004 Series (Firmware version 3.13.1 and earlier), EDR-G9010 Series (Firmware version 3.13.1 and earlier), EDF-G1002-BP Series (Firmware version 3.13.1 and earlier), NAT-102 Series (Firmware version 1.0.5 and earlier), OnCell G4302-LTE4 Series (Firmware version 3.13 and earlier), and TN-4900 Series (Firmware version 3.13 and earlier)CVE-2024-9140 - EDR-8010 Series (Firmware version 3.13.1 and earlier), EDR-G9004 Series (Firmware version 3.13.1 and earlier), EDR-G9010 Series (Firmware version 3.13.1 and earlier), EDF-G1002-BP Series (Firmware version 3.13.1 and earlier), NAT-102 Series (Firmware version 1.0.5 and earlier), OnCell G4302-LTE4 Series (Firmware version 3.13 and earlier), and TN-4900 Series (Firmware version 3.13 and earlier)Patches have been made available for the following versions -EDR-810 Series (Upgrade to the firmware version 3.14 or later)EDR-8010 Series (Upgrade to the firmware version 3.14 or later)EDR-G902 Series (Upgrade to the firmware version 3.14 or later)EDR-G903 Series (Upgrade to the firmware version 3.14 or later)EDR-G9004 Series (Upgrade to the firmware version 3.14 or later)EDR-G9010 Series (Upgrade to the firmware version 3.14 or later)EDF-G1002-BP Series (Upgrade to the firmware version 3.14 or later)NAT-102 Series (No official patch available)OnCell G4302-LTE4 Series (Please contact Moxa Technical Support)TN-4900 Series (Please contact Moxa Technical Support)As mitigations, it's recommended to ensure that devices are not exposed to the internet, limit SSH access to trusted IP addresses and networks using firewall rules or TCP wrappers, and implement measures to detect and prevent exploitation attempts.Found this article interesting? Follow us on Twitter and LinkedIn to read more exclusive content we post.SHARE

The AJ100-topping practice said yesterday (6 January) that it had agreed to occupy three floors at 50 Electric Boulevard, an office block it designed itself, and which completed last July as part of the Battersea Power Station masterplan.The offices are a mile east of Fosters main Battersea Riverside headquarters in Hester Road.The AJ understands that hundreds of staff and multiple project teams from Fosters workforce will relocate to the new studio space. The company has a total of 1,894 staff, according to its most recently filed Companies House report.AdvertisementThe practice will occupy roughly 4,460m2 of the 18,600m2 office building, which sits to the western side of Electric Boulevard. The street links the Grade II*-listed Gilbert Scott-designed power station, retrofitted by WilkinsonEyre, to Grimshaws Battersea Power Station tube stationFosters announcement comes after recent Companies House documents showed an enormous growth in Middle East income for the practice. The region made up by far the biggest share (42.1 per cent) of its 177.5 million income for the 2023-24 year.Fosters pipeline of work in the Middle East includes major Saudi Arabia projects. In 2022, it won the job of masterplanning the King Salman International Airport in Riyadh, the Saudi capital, while last year, the AJ revealed it was behind plans for a 2km-tall tower in the city.In comparison, UK work made up only 9 per cent (37.9 million) of Fosters 2023-24 income. That is despite it being the UK's largest practice, achieving a record 422 million in turnover over the period.Fosters managing director Stuart Latham said of the Electric Boulevard occupation: It has been a privilege to be part of the redevelopment of Battersea Power Station and we are now delighted to be expanding into a state-of-the-art office space at 50 Electric Boulevard.AdvertisementHe continued: The location has strong links with our existing Riverside studio in Battersea and allows us to actively support our growing workforce in London.Foster + Partners design for a six-runway international airport in Riyadh, Saudia Arabia

The winning teams include AHR Architects, ArchitecturePLB, Ayre Chamberlain Gaunt, BDP, Conran and Partners, Pollard Thomas Edwards, PRP Architecture and Weston Williamson + Partners (WW+P).The teams selected for the four-year agreement will have the opportunity to work on a range of housebuilding projects with the Eastleigh-based housing association.Abri manages more than 50,000 homes across the south and south-west of England and plans to deliver at least 1,000 new homes a year.AdvertisementThe winning teams will support Abris 800 million construction programme to develop new homes across its regions in line with a commitment to build 10,000 homes by 2030.Abri director of development Nicola ORourke said: Were looking forward to collaborating with partners who share our commitment to creating communities that deliver lasting social value. This framework is about more than just building homes; its also about creating jobs and offering educational opportunities.By working together, with a focus on high-quality, sustainable homes, we can develop thriving communities that will grow in the years ahead.The framework is divided into three lots covering architecture, employers agent, and principal designer services. The framework launch comes a year after Silva Homes became a member of Abri Group.Abri was created in 2020 following a merger between Radian and Yarlington housing associations.Recent schemes include Architecture PLB-designed 18.5 million Quebec Park development in Whitehill and Bordon.AdvertisementThe chosen consultantsAHR ArchitectsArchitecturePLBAyre Chamberlain GauntBaily GarnerBDPBoon BrownBoulter MossmanConran and PartnersECD ArchitectsECE ArchitectureFaithorn Farrell TimmsFBM ArchitectsFrazer Garner AssociatesGates Construction ConsultantsHunter & PartnersJohn Rowan and PartnersKendall KingscottKSA ArchitectsLambert Smith Hampton GroupMH ArchitectsMichael Dyson Associatespdp architecturePellingsPollard Thomas EdwardsPRP ArchitectureQuattro Design ArchitectsRandall SimmondsRidge & PartnersRund PartnershipTremain Powell PartnershipWard Williams AssociatesWelling PartnershipWeston Williamson + Partners

Chris Dyson Architects won the competition to design a new building on the Harrow Arts Centres (HAC) campus. The focus of the campus is the Grade II-listed Elliott Hall. The Greenhill Building is behind this, next to the boiler house and chimney and several low brick buildings, now artists studios historically part of a school and its farm. It replaced a crumbling site cabin.To make the most of the available budget, the team had to be inventive with site, form and structure and explore unconventional materials to deliver a flexible building that would be of enduring value to the local community. Our aim was to provide the spaces for yoga, workshops and celebrations that the community had asked for, while supporting HACs aim to be more financially sustainable. The L-shaped, two-storey building maximises useable space. Two large teaching rooms on the ground floor have double doors opening onto a courtyard. Above are two top-lit teaching rooms and a small studio with a view through the trees.Its an early example of a fully cross-laminated timber structured arts centre, which was more typical in education and office buildings at that time, but offered an affordable, low-waste and low-carbon alternative to structural steel.Mathew Witts, partner, Chris Dyson ArchitectsAdvertisementProject dataStart on site 2021 Completion Gross internal floor area 2Construction cost 1.8 millionConstruction cost per m2 3,910Architect Chris Dyson ArchitectsClient London Borough of HarrowStructural engineer Webb YatesM&E consultant Webb YatesQuantity surveyor PT ProjectsPrincipal designer Chris Dyson ArchitectsApproved building inspector Harrow Building ControlLandscape architect Kinnear Landscape ArchitectsSignage and wayfinding Studio EmmiTransport planningFire safety CWBCAD software used RevitAnnual CO2 emissions 1.1 kgCO2e/m/yr (operational)Predicted design Life 60 yearsEmbodied and/or whole-life carbon225 kgCO2e/m (structural)144 kgCO2e/m (non-structural)369 kgCO2e/m (total upfront)300 kgCO2e/m (sequestered)Architects choicesThe approach is unashamedly new, but sensitive to the campuss history and patchwork of buildings. The site was once surrounded by fields. This agricultural legacy informed the L-shaped plan around a yard and red corrugated faade we considered Cor-ten early on, which we have used previously, but the cost was prohibitive and we liked the boldness of the red fibre cement against the brick, and the fact it is an everyday, practical farm material. Throughout, the design embraces the challenge of doing more with less: creating more useful space for people, but using less material, less energy and a fully CLT structure.Chris Dyson, principal, Chris Dyson ArchitectsSpecificationThe red corrugated faade is made from a fibre cement more typically used for barn roofs. The profile was selected from a brochure specified for livestock and equestrian facilities. It offers good thermal performance and protects from heat and moisture.All materials were selected with consideration of their future use just as CLT can be dismantled and repurposed, the cement fibre cladding panels can be ground down to create new ones. The building itself is designed to be similarly adaptable.The serrated roof peeks above the surrounding brick buildings. Each asymmetrical pitch takes advantage of north light and glazing creates bright, top-lit rooms. The budget was focused on the elements that would most impact everyday use, such as acoustic insulation between floors so a dance class upstairs wont disrupt a life drawing session downstairs.AdvertisementOne challenge was to manage the budget against rising material costs and availability during the pandemic. This was achieved through pragmatic material choices, close collaboration with suppliers, clear priorities and keeping our focus on the buildings eventual users. For services, our design uses off-the-shelf commercial cable trays to minimise installation costs and save time.Chris Dyson, principal, Chris Dyson ArchitectsSelected productsDoorsDorplanPuraDor in ashAll roomsdorplan.co.uk/puradorFloor coveringsIVCCommercial Optimise 70 heterogeneous vinyl floor covering, Cevennes T97Allivc-commercial.comSuspended lightingHilton6280 Surface/suspended. Black finishGround floorAll DownlightsJohn Cullen LightingRF2. Black finishThroughoutjohncullenlighting.comCladdingEternitExternal faadeseternit.co.ukRooflightsVeluxRoofvelux.co.ukCross-laminated timberEurbanThroughouteurban.co.ukLiftCibescibeslift.comRoofSarnafilRoof coveringgbr.sika.com

The Last of Us season 2 trailer teases two of the game's most impactful scenesAirs April.Image credit: Max News by Victoria Kennedy News Reporter Published on Jan. 7, 2025 A new trailer for The Last of Us has been released, teasing some of the events to come in the show's second season.Additionally, while we still don't have a specific date, it has been announced that The Last of Us season two will begin airing in April. That's the same month The Last of Us Part 2 will make its PC debut.The trailer, which you can see below, lasts a little over a minute, but still manages to cram in the suspense. Along with Ellie and Joel, we also get another look at new characters for this season, including Kaitlyn Dever's Abby and Isabela Merced's Dina. Please note, beneath the trailer I will be going into more detail about what was shown, so be aware of major spoilers for The Last of Us Part 2 below.The Last Of Us Season 2 | April 2025. Watch on YouTubeA fair portion of the trailer is made up with snippets of scenes we have seen before: Ellie and Dina getting swarmed by infected in the subway, Ellie at the Jackson dance (although this time with Dina), Joel shedding a tear during a presumed therapy session, the tender moment between a weary looking Tommy and Maria, and so on.Jeffrey Wright, reprising his role as Isaac, and the Seraphites are also glimpsed during the latest trailer for season two. Image credit: Naughty Dog Image credit: MaxBut there are also two moments I particularly want to highlight, which are sure to pack an emotional punch upon the series' release.The first is the very opening of the trailer, which begins in a hallway with a wailing siren and ominous red lighting. A lone figure walks into the shot. She is holding a gun with a Firefly pendant around her neck. It is Abby, and this scene is clearly set in the hospital after Joel's rampage at the end of season one.Those who have played The Last of Us Part 2 know this means Abby is about to come across the body of the doctor who was set to perform surgery on Ellie before Joel killed him - her father. I won't deny, I cried when I played through this part. Image credit: Naughty Dog Image credit: MaxThe second moment that bears mentioning specifically is the lone shot of Ellie, again bathed in a red light, aiming a gun at an unseen target. The scene then cuts to black, but heavy breathing can be heard.Based on events in The Last of Us Part 2, I am going to say this moment takes place after Ellie chases WLF member Nora (played in the show by Tati Gabrielle) down in Seattle. Ellie proceeds to torture and kill Nora, in one of the already harrowing game's most harrowing moments. Ellie's actions here traumatise her even further, and she returns to Dina and Jesse in a state of shock.When I played The Last of Us Part 2, this moment with Nora left me feeling especially uncomfortable. I wonder if those who have not played the game will feel this same sense of unease when the second season airs. Image credit: Naughty Dog Image credit: Max Image credit: Naughty DogLast year, The Last of Us showrunner Craig Mazin confirmed the second season of The Last of Us will comprise of seven episodes, with one of those episodes being "quite big" in length."The story that we're telling is much bigger than the story of season one, there's just a lot more going on, it's a lot harder to produce but we want every episode to feel like its own blockbuster to be honest with you," Mazin said in June.The Last of Us Part 2's story will not be told in full during season two, with subsequent seasons expected to wrap up the narrative.

You can trust VideoGamer. Our team of gaming experts spend hours testing and reviewing the latest games, to ensure you're reading the most comprehensive guide possible. Rest assured, all imagery and advice is unique and original. Check out how we test and review games hereNetEase Games reveal of Marvel Rivals Season 1 Eternal Night came with some awesome looks at some new content for the free-to-play superhero shooter. Alongside new maps and the arrival of the Fantastic Four, the new season will be nerfing some popular characters to make them more fair to fight.Some of the most overpowered characters in the game will not be toned down to offer a more balanced experience in the free-to-play game. Alongside the massive damage of Hawkeyes arrows, players will be excited to learn that Jeff the Land Sharks sweeping Ultimate will be nerfed as well.Marvel Rivals balance adjustmentsRevealed in the studios Dev Vision Vol. 3 video update, Marvel Rivals Season 1 balancing pays close attention to Hela, Hawkeye and Jeff the Land Shark. Noted by fans as the most unbalanced characters of the games launch period, alongside that pesky Iron Fist, the heroes managed to top the best characters tier list for the game.In the first half of Season 1, we will be making crucial balance adjustments to keep the battles fresh and exciting, NetEase confirmed in the update video.Formidable ranged duelists were targeted as the key focus for Rivals first major balance sweep with nerfs coming to entice players towards other ranged characters. On the other hand, Captain America and Venom will see huge buffs to make them more viable against ranged foes, empowering them to charge into battle and protect their allies.Additionally, NetEase confirmed that heroes in unique positions like Wolverine and Storm will also be tuned to allow them to shine more individually on the battlefield, while Cloak and Dagger are also tweaked to service more diverse team setups.Finally, NetEase confirmed that healer Jeff the Land Shark will see a massive rework on his heavily meme-d ultimate. The developers are working to fine-tune the characters detection range of his ultimate, allowing players more chance to escape his adorable wrath.At the time of writing, NetEase has not revealed the exact stats behind these balance adjustments, but some are expected to be major. With over 30 heroes to play as, and more to be added, Marvel Rivals will see constant balancing updates, and thats only a good thing.Marvel RivalsPlatform(s):macOS, PC, PlayStation 5, Xbox Series S, Xbox Series XGenre(s):Fighting, ShooterSubscribe to our newsletters!By subscribing, you agree to our Privacy Policy and may receive occasional deal communications; you can unsubscribe anytime.Share

cookielawinfo-checkbox-analytics11 monthsThis cookie is set by GDPR Cookie Consent plugin. The cookie is used to store the user consent for the cookies in the category "Analytics".cookielawinfo-checkbox-functional11 monthsThe cookie is set by GDPR cookie consent to record the user consent for the cookies in the category "Functional".cookielawinfo-checkbox-necessary11 monthsThis cookie is set by GDPR Cookie Consent plugin. The cookies is used to store the user consent for the cookies in the category "Necessary".cookielawinfo-checkbox-others11 monthsThis cookie is set by GDPR Cookie Consent plugin. The cookie is used to store the user consent for the cookies in the category "Other.cookielawinfo-checkbox-performance11 monthsThis cookie is set by GDPR Cookie Consent plugin. The cookie is used to store the user consent for the cookies in the category "Performance".viewed_cookie_policy11 monthsThe cookie is set by the GDPR Cookie Consent plugin and is used to store whether or not user has consented to the use of cookies. It does not store any personal data.

Take a guessCourt documents reveal just how much more expensive Call of Duty games are to make compared to even PlayStation's biggest exclusivesIt's fair to say that everyone knows Call of Duty games cost a lot of money to make, but I don't think most of us could guess just how much money is spent on developing each title. News by Sherif Saed Contributing Editor Published on Jan. 7, 2025 Of the many high-budget games that get released every year, Call of Duty titles remain among the most mysterious in terms of what goes into their production. While Take-Two and Sony Interactive Entertainment may drop some budget figures here and there about their top-selling, most lucrative franchises, Activision never brings up the topic.The annualised shooter, it turns out, is a lot more expensive to develop than many of the games we usually think of when we think expensive video game, and we now have, for the first time, an idea of just how much money it took to develop a few of the most recent Call of Duty games.To see this content please enable targeting cookies. As revealed in Stephen Totilos Game File newsletter, Activision recently disclosed some figures about the budgets, as well as sales, of a couple of its most recent Call of Duty titles. The details were part of court filings made by the publisher in a case filed against it regarding a 2022 elementary school shooting in Uvalde, Texas.In the documents, Call of Duty creative boss Patrick Kelly revealed that the budgets for Call of Duty games released between 2015 and 2020 reached upwards of $700 million per title. More specifically, the executive said that 2015s Black Ops 3 cost over $450 million to develop, and took three years to make. The game ended up selling 43 million copies.The 2019 Modern Warfare reboot was also cited as having sold 41 million units on a budget of more than $640 million. Finally, 2020s Black Ops Cold War was the most expensive, costing Activision over $700 million and selling the least, at 30 million copies. All games were made by hundreds of developers at several studios. Black Ops Cold War is the most expensive of the three games cited.The lawsuit, which was filed in May last year [paywall], also involves Instagram. It blames Call of Duty, along with the social media platform - in part - for the content that influenced the perpetrator of the mass shooting. The three Call of Duty titles referenced were said to be the shooters most-played games.As Totilo points out, these are the highest budgets reported by a major video game publisher. Theyre also well beyond the already high costs of some of the most expensive games ever made, such as The Last of Us Part 2, which Sony revealed in court documents that it cost over $220 million to make.