Threats Faced by the Video Game Industry

Compromised credentials

• Infostealers are often used to acquire valid gaming credentials, which are then sold on underground marketplaces, such as Russian Market, Genesis Market, and 2easy. 
• These stolen credentials can be further used to conduct a wide array of cyberattacks, including BEC attacks or initial access for ransomware attacks. 
• In September, researchers spotted the new Erbium infostealer masquerading as fake cracks and cheats for video games, in an attempt to pilfer gamers’ credentials and crypto wallets.

DDoS attacks

• In a latest incident, the Mirai botnet hit the Minecraft Wynncraft server with a 2.5 Tbps DDoS attack. 
• Blizzard’s Overwatch 2 suffered a massive DDoS attack that destabilized the servers. 
• DDoS attacks against the gaming sector are pretty common and usually target players, gaming infrastructure, streamers, or esports events. 
• A few days back, LofyGang was found stealing the credit card details of Nitro, Discord, and gaming services users. 

Ransomware and data extortion

• Gaming companies have become a popular target among cybercriminals due to the vast amount of sensitive information—source code, corporate documents, and customer data—possessed by them. For instance, BlackCat or ALPHV attacked Elden Ring publisher Bandai Namco in July. 

The bottom line