Whether you dabble in Minecraft or dedicate whole weekends to Call of Duty, gamers everywhere should note increased hacker activity in the online gaming community. TransUnion found that digital fraud in online gaming is up nearly 400%. And it's not just gaming celebrities under attack; amateur gamers are a common target, too. So, how can you stay ahead of the hackers and win at online security as a gamer?
Why hackers target gaming accounts
It's no surprise that gaming celebrities and companies are common hacker targets. Hackers might be after cryptocurrency, source code, in-game assets, or the notoriety of defacing a celebrity handle. Sometimes hackers pursue these high-profile targets simply for the thrill of it. What might surprise you is that hackers go after everyday gamers, too. Online gaming accounts are a treasure trove of personal and financial data. Even if you don't think you have "something worth stealing," your data is often motivation enough for hackers to try getting into your account. Their tactics may not be particularly sophisticated, but they're effective nonetheless. For example, using social engineering, like targeted phishing attacks, hackers may try to trick you into revealing your online gaming credentials by sending you a link that looks valid. Or, they'll check databases of leaked credentials to see if any work on popular gaming sites. Also, if you reuse passwords for many different online accounts, hackers can quickly log in when they find matching credentials. Once they're in, hackers may take over the account and change the password so you're locked out. Or, they may export any relevant information for their use or resale but otherwise, leave the account accessible to you. In other words, they'll "rob" your account. Hackers may then sell stolen account credentials or personal data on different marketplaces. For example, some gaming companies have sanctioned marketplaces where players can purchase perks and items, like an online store. In contrast, "gray" marketplaces aren't strictly illegal. Still, they may go against user agreements for online games, and there's no guarantee that a broker won't simply steal your money, account credentials, or other information. The "dark web," on the other hand, is where criminal activity happens; hackers sell stolen data to buyers who want valid gaming credentials, credit card numbers, or other personal data to add to growing databases for illicit use. These data broker sites' scope and predatory practices make them frightening entities.How to keep your accounts safe
The good news is that you can do plenty to keep your online gaming accounts safe from hackers. Laying a solid foundation of following cybersecurity basics will eliminate the most common threats. To keep your gaming accounts safe:- Multi-factor authentication is critical. Multi-factor authentication significantly increases your protection by requiring additional information when logging in. Even with a stolen password, hackers won't be able to log in without a code, specific geolocation data, fingerprint, or other selected "factors" that prove someone is the rightful account owner. You can typically turn on multi-factor authentication in your account's security settings, and there are many easy, popular options from which to choose.
- Use a password manager. Every password for every online account should be different, long, and random. A password manager generates passwords, stores them securely, and safely fills them for you when you need to log in. A strong, unique password for every single account is possible when you don't have to remember or type them. A password manager also facilitates secure, convenient password sharing.
- Check your digital footprint as a gamer. Which games do you play? What types of information do you store in those accounts? Are you sharing too much? Stick to the bare minimum personal information needed to play the game. Avoid storing financial information like credit cards or crypto keys. Use unique usernames when possible, so it's harder to identify you on different gaming platforms.
- Beware of malware. Keyloggers, spyware, and other malware can monitor your online activity and steal your personal information. Always download browser extensions, apps, and games from trusted sources. Only download from vetted app stores and double-check the game's publisher. Play on secure WiFi where a password is required. Keep a clean machine and avoid gaming on public or shared computers.
- Don't fall for phishing scams. Some phishing attempts are obvious. Lousy spelling, strange formatting or fonts, and poor grammar can signify a phishing attempt. Look carefully at URLs and email addresses for slight differences that look suspect. Other phishing attempts can be very sophisticated, so stay alert for someone pressuring you to click something urgent or requesting information you wouldn't typically need to share.
