Gaming
How Minecraft and Game Modding Can Undermine Your Security
Written by Márk Szabó, a Security Writer at ESET
ESET Research has revealed a concerning fact — gamers are being targeted by cybercriminals, and it’s no mystery why they are such meaty targets. The gaming industry is huge — some games generate millions in monthly revenue, satisfying gamers and executives simultaneously. However, in some cases, gaming can present some very real dangers that are a bit more severe than getting a virtual arrow in your knee.
I wanna be, the very best
How far will a person go to excel in their game? With the advent of online gaming, more and more people are playing together in real time, leading to more social interactions than ever before. This can lead to a lot of pressure, especially when playing online games with a player vs. player (PVP) aspect like multiplayer shooters or battle arenas.
When you want to be the best, you will focus on improving your skills, right? Well, quite a few people would rather cheat their way to the top of the rankings, raking in the gain without the pain.
The game has just begun
However, cheats are not the only attack vectors for infostealers to infiltrate your device. When you really like a game, like Minecraft, for example, you might want to go beyond what the developer offers with the default set of assets and gameplay scenarios. For example, players of the Java version of Minecraft often modify their worlds by adding additional creatures, building blocks, or more ways to use redstone, leading to creations such as functional computers inside the game (the creativity is limitless, really).
While it is great that players seek more creative ways to redefine their game experiences, cybercriminals also abuse this. You see, mods (game modifications) are usually available as downloads —– for Minecraft, typically on web pages like Planet Minecraft or Minecraft Mods. These are all publicly available platforms, hence why cybercriminals try to exploit such places with their nefarious prospecting by updating modifications and injecting them with malicious code.
Such was the case reported by Bleeping Computer, when hackers compromised several accounts on modding platforms to distribute infostealers, hijacking existing projects. Sadly, sometimes not even official resources are free of exploitation due to various vulnerabilities, as was the case when 50,000 Minecraft accounts were infected due to skins injected with malware capable of reformatting hard drives and deleting backups plus system programs, offered as a download on the game’s website.
Nothing is true; everything is permitted
Apart from infostealers, phishing is also trendy in gaming circles. Gaming placed No. 10 in the top phishing website category by ESET Research. To paint a picture of how this happens, consider when a gamer is playing an online MMO like World of Warcraft or a game with virtual currency such as Fortnite.
Character skins and various XP boosts might require you to purchase them with said virtual currency. In WoW’s case, for example, there’s the WoW token. You either purchase one with in-game gold for game time or Battle.net balance (enabling real currency purchases) or do the opposite and purchase one for an influx of in-game gold with real money. Imagine it as a foreign exchange of sorts.
Similarly, in Fortnite, V-Bucks are used to purchase outfits, emotes, and Battle Passes. All these are rather tempting for various reasons, especially when you want to stand out among an online crowd.
Kids, teenagers, and even adults don’t know better sometimes. Via the chat functions in these games (unless disabled or if the account has a parental lock), gamers can be tempted by fellow players to visit certain websites to receive either currency for free! Just insert your login details and you’ll immediately receive an influx of your desired virtual cash/token. Or, more likely, your credentials and account will get stolen, since now you’ve been successfully phished by a cybercriminal.
Infostealer detections
ESET telemetry continues to detect threats like RedLine Stealer and Lumma Stealer, with the former achieving localized detection peaks coming mostly from states such as Germany, Spain, and Japan.
On the other hand, Lumma switched its malware to a new variant, leading to a growing trend in its detections as Win/Spy.Agent.QLD.
Both infostealers have been detected in payloads of files masking themselves as cheating tools or video game cracks (game executables bypassing copy protection). All in all, infostealers have seen a slight rise compared to the previous period (4% increase) globally.
ESET has also detected Epsilon Stealer (as JS/PSW.Agent trojan variants .CH and .CI). It was recently present in a popular mod of Slay the Spire, pushed through the Steam update system, after having breached the developer accounts on Steam and Discord. Once installed, Epsilon looks to exfiltrate cookies, saved passwords, and credit card details from web browsers, plus login info for Steam, Windows, and other accounts.
Stay awhile and listen
To protect against infostealers and other malicious threats, your best bet is to raise your protection with strong next-gen security software, so that it can assure a strong safety net in case a modpack gets infected or if someone downloads an infected executable that has already been caught by one of our global sensors.
The same software also offers anti-phishing protection and secure browsing to block suspicious websites or emails, and to guarantee a safe browsing experience while socializing online.
As for account security, use diverse passwords, store your credentials in password managers (instead of browsers), and use the app or biometrics-based multi-factor authentication instead of SMS to add another layer to your account’s security, keeping threat actors at bay.
Gaming
TMNT: Mutants Unleashed Gameplay Trailer is Out
Outright Games, the leading publisher of family-friendly interactive entertainment, in collaboration with Paramount Game Studios, is excited to reveal the thrilling new gameplay trailer for the highly anticipated Teenage Mutant Ninja Turtles: Mutants Unleashed. Developed by AHeartfulofGames, this story-driven 3D Brawler/Platformer game will be released on 18th October 2024 and will be available to play on PlayStation 4, PlayStation 5, Nintendo Switch, Xbox One, Xbox Series X|S, and Steam.
Continuing the story of Paramount Pictures’ 2023 hit Teenage Mutant Ninja Turtles: Mutant Mayhem, fans of the beloved franchise can get ready to team up with everyone’s favourite heroes in a half shell, taking on missions solo or teaming up with a friend in up to 2-player co-op. The new gameplay trailer showcases the acclaimed 3D-meets-2D art style of the movie and sees players take control of Leonardo, Raphael, Donatello and Michelangelo, each with their unique combat style and unlockable skill tree. It also offers a glimpse at the game’s original storyline, as the pizza-loving crime fighters battle to save New York City from a rising Mewbie threat.
Narrated by fan-favourite character April O’Neil in the style of her captivating ‘O’News Casts, the trailer also showcases all-new original mutants and their difficulty-enhancing mutations, all designed by the film’s lead character designer, Woodrow White. Fans can also get a feel for the expansive New York City environments, from the tops of skyscrapers to down in the sewers, from pizza parlours to a concert led by Bebop and Rocksteady.
Stephanie Malham, Managing Director of Outright Games said, “With 2024 marking the 40th anniversary of this incredible franchise, it has been a pleasure to work with Paramount Games Studio to bring this extraordinary world to life. We hope this new gameplay trailer will whet the appetite of TMNT fans old and new!”
Teenage Mutant Ninja Turtles: Mutants Unleashed will be coming to PlayStation 4, PlayStation 5, Nintendo Switch, Xbox One, Xbox Series X|S, and Steam on 18th October 2024. The Deluxe and Collector’s Edition physical releases are available to pre-order from specialist retailers now.
Gaming
Gosu Academy Announces UAE Expansion
Gosu Academy, a leading provider of esports coaching and education, has announced its expansion into the UAE. The company’s entry into the region comes at an opportune time, as the gaming industry is poised to contribute over $1 billion to Dubai’s GDP by 2033, with an estimated 30,000 jobs to be created.
The announcement further aligns with Gosu Academy’s mission to empower individuals through exceptional education in gaming and esports, supporting the UAE’s ambition to become a global esports hub. Established by seasoned professionals with over twenty years of expertise, Gosu Academy started its journey in the United States and Europe before expanding to Asia.
Gosu Academy is expanding into the UAE to take advantage of the nation’s dynamic gaming community and its progressive esports initiatives, having already established a footprint in the Middle East, including Saudi Arabia. Having trained more than 14,000 students globally, the academy’s expansion to the UAE marks a pivotal step in its global growth strategy.
F. Javier Bernal, Co-Founder & Co-CEO of Gosu Academy said, “This market presents tremendous opportunities, and we are eager to enhance the region’s fast-developing esports landscape. In line with the Dubai government’s focus on this sector and the vision of the Dubai Program for Gaming (DPG) 2033, which aims to create jobs and bolster innovation, we strongly believe that Gosu Academy, through our expertise, can contribute significantly to this initiative. At the same time, Abu Dhabi’s ambitious project to build an Esports Island reflects its distinct approach, focusing on creating a dedicated hub for global esports events and immersive gaming experiences. We aspire to cultivate a new wave of gaming and esports experts in the UAE, establishing the nation as a frontier in this sector, with both Abu Dhabi and Dubai playing complementary roles in driving the future of esports.”
Braeden Plein, Co-Founder & Co-CEO of Gosu Academy, remarked, “Our mission is to redefine the future of gaming and esports by equipping individuals with essential skills and knowledge for success. DPG 2033, which aims to generate 30,000 jobs in this sector, resonates deeply with our objectives. We are dedicated to advancing this vision and providing our best support in achieving the economic target of USD 1 billion in the Gaming industry by nurturing outstanding talent and providing meaningful employment opportunities within the industry.”
Gadgets
Acer Shows Off Project DualPlay Gaming Laptop Concept with Detachable Controllers
Acer today unveiled the Project DualPlay gaming laptop concept at its next@acer global press conference in Berlin, Germany. This Predator concept embraces the latest gaming trends, unleashing a new dimension of versatile and shared PC gaming experiences that converge in one powerful device.
Project DualPlay pushes the boundaries of gaming on-the-go, offering players more ways to enjoy their favourite AAA titles. The cutting-edge design features a vast touchpad that doubles as a built-in detachable wireless controller. Players can easily wield the wireless controller from its electromagnetic lock by simply placing two fingers on the release button located on top of the keyboard. This action also triggers the two high-fidelity, 5-watt pop-out speakers to emerge from the sides of the laptop, immersing players in heart-pounding audio that brings every scene to life.
For multiplayer enthusiasts, Project DualPlay allows another player to jump in on the action. Whether it’s a first-person shooter, multiplayer online battle, sports, or fighting games such as Capcom Street Fighter 6, Project DualPlay elevates gaming control and experiences to new heights. The detachable controller can be further separated into two joysticks that are perfect for head-to-head combat on the next evolution of the Street Fighter series and can instantly transform the laptop into a battle station. This feature also provides gamers with the flexibility to switch seamlessly between keyboard and controller gaming, and to adapt to different playing styles and game genres.
The new gaming laptop concept creates an electrifying atmosphere that fuels gamers’ passion. The device is wrapped with customizable 360-degree dynamic RGB lighting on the keyboard, screen bezels, and wide trackpad area to add to its visual appeal. The mesmerizing light show extends even further to the infinity mirror lighting bar at the backside and the detachable controller’s joysticks, dazzling players during gameplay.
With Project DualPlay, the Predator brand is innovating the gaming laptop market. The concept represents a bold step forward in gaming innovation, promising to deliver unique experiences and engagements for gamers of all levels.