According to a new report from Kaspersky, 34 million user of the gaming platform Roblox have been exposed on the dark web between 2021 and 2023.
The number of compromised accounts has been steadily increasing over the past three years. In 2021, 4.7 million compromised accounts were identified, while in 2023, 15.5 million were found.
Beyond Roblox , many other gaming platforms have been targeted by hackers, according to Kaspersky. The report shows that the average number of compromised accounts on 11 different gaming platforms – including Twitch, Electronic Arts, Sony PlayStation and Steam – has increased by 112% since 2021.
See also: Epic Games: No evidence of breach by Mogilevich hackers
Experts warn that cybercriminals are hiding infostealers in cheat code files or sharing malicious download links on popular platforms like YouTube to trick young gamers.
Since the malicious links are found on legitimate and popular platforms like YouTube, it's easy to fall for the trap, especially for younger gamers. A Kaspersky researcher reported that a significant number of compromised accounts have originated from a game aimed at children.
And while Roblox account breaches and credential theft are particularly prevalent, researchers have noticed that Steam is also a favorite target for hackers due to the ability to steal real money.
“Criminals target gaming accounts to steal valuable items, such as real money, in-game currency, and various in-game items, such as expensive skins. Steam appear to be more attractive to cybercriminals due to the ability to find and steal real money,” the researcher said.
See also: Insomniac Games notifies those affected by Rhysida ransomware
However, Roblox accounts remain vulnerable to exploitation for in-game currency and valuable items. Additionally, breaching them can allow access to premium accounts that allow for the transfer of assets to other accounts.
“While users need to be vigilant, platform can also enhance protection by monitoring and promptly blocking compromised accounts through specialized services.“.
To mitigate the risks associated with credential leaks (e.g. Roblox), gamers and companies should take several security. The first and most basic is using strong and unique passwords for each service and implementing two-factor authentication where possible.
See also: Gaming & Cybersecurity: Risks and ways to protect yourself
It is also important to promote education for gamers on good security practices to protect their accounts. This can include informing users about the risk of phishing, the importance of using unique passwords, avoiding sharing their credentials, and avoiding downloading games from untrusted sources.
🔑 Secure your passwords with Proton Pass
Password manager from Proton — end-to-end encryption, passkeys, built-in 2FA, and monitoring for leaks of your credentials.
- ✔ Encrypted storage of passwords & passkeys
- ✔ Notification if any of your passwords are leaked (Dark Web Monitoring)
- ✔ Free version — on all devices
The link is an affiliate link — SecNews may receive a commission at no additional cost to you. It does not affect the independence of our article writing.
Finally, gaming companies should strengthen the security of their systems , especially those that store gamers' data , and work with cybersecurity experts to protect their platform from future breaches
Source: www.infosecurity-magazine.com
