Cyber Threat Actor: Eris Loris

ErisLoris is the alias used by an individual or group known to have carried out disruptive attacks against the online multiplayer game Among Us. Public reporting indicates that the actor is associated with the United States of America, though no further personal details have been disclosed. The name Eris Loris appeared in the spam messages that flooded the game’s chat during the incidents described in threat intelligence sources.

The actor’s activity specifically targeted the gaming sector, focusing on the servers and player base of Among Us, a title with a global audience. The attacks involved the deployment of automated bot accounts that joined public matches and inundated the in‑game chat with repetitive messages. These messages promoted a YouTube channel and a Discord server operated under the same alias and also contained political content endorsing a 2020 presidential campaign. The primary observable effect was the disruption of normal gameplay, rendering matches unplayable for legitimate users while simultaneously advancing the actor’s promotional and political messaging objectives.

The tactics observed in the Eris Loris campaigns rely on the use of scripted bots to create numerous game accounts and connect to servers, overwhelming the chat system with spam. No malware families, exploit kits, or sophisticated intrusion techniques were referenced in the available sources; the tooling appears limited to basic automation for message flooding. Initial access seems to have been achieved simply by registering accounts and joining publicly available game lobbies, taking advantage of the game’s open matchmaking rather than exploiting server vulnerabilities.

A notable example of the actor’s operations occurred on October 23 2020, when a wave of Eris Loris‑named bots flooded Among Us servers with ads and political slogans, prompting the developer InnerSloth to issue an emergency server update aimed at removing the malicious accounts. This event highlighted ongoing challenges with server stability and cheating that the studio had previously reported, and it contributed to the decision to cancel work on a sequel in order to focus on improving the original game’s infrastructure and security. The incident remains the most publicly documented activity attributed to Eris Loris.