The global online gaming community is being targeted by cybercriminals who are exploiting vulnerabilities related to gamers’ interactions with digital content. A recent report by Sekoia.io described a new malicious campaign that uses Discord and fake download sites to distribute the info-stealer malware targeting gaming community.
According to researchers, gamers are constantly trying to find ways to improve their gaming experience and are unwittingly exposed to deceptive tactics used by cybercriminals.
See also: SpyNote appears as a Roblox mod and targets gamers
These tactics range from tempting in-game offers to fake cheat codes, and entice users to unknowingly execute malicious payloads , particularly those associated with info-stealer malware. Info-stealer malware is a growing threat not only to gamers, but also to other users and businesses.
Sekoia reported a specific incident in July 2023, where French gaming influencers were targeted via a Discord message, offering exclusive access to a seemingly genuine game.
“Recently, cloud gaming company Shadow sent out emails to its users to warn of a data breach,” the researchers’ post states. “According to Shadow, the initial access was a fake game downloaded from Discord. This incident is part of the broader campaign described in this report.”
See also: Elden Ring: Hackers are now ruining gamers' game
Sekoia also said that the malicious payloads are distributed via messages from compromised accounts. The link embedded in these messages invites users to download a malicious file or takes them to a fake website.
The company's analysts identified several info-stealer malware (e.g. Doenerium and Epsilon Stealer) in this campaign targeting the gaming community.
Protection
Online gamers can take a few steps to protect themselves from info-stealer malware. First, it's important to use a reliable and up-to-date antivirus program. A good antivirus will detect and remove malware before it can do any damage. You should also be cautious about links and files you download from unknown sources. Avoid clicking on suspicious links and downloading files from untrusted sources.
See also: Infostealer malware: Why do cybercriminals prefer them?
Another important step is to update your operating system and games . Software companies often release updates that fix security holes and vulnerabilities that could be used to install info-stealer malware. Therefore, it is important to install these updates when they are available. Additionally, use strong passwords for your accounts and change them periodically to make it difficult for malicious users to gain access
Finally, you should be careful with the information you give to other players. Do not reveal personal information or details about your account, as this information can be used by malicious users to steal accounts .
Source: www.infosecurity-magazine.com
