Darknet Research Details Account Theft, Data Leaks and Extremist Activity in Gaming Communities
Summary
Open-source research describes stolen gaming accounts, game and company data leaks, and extremist groups exploiting gaming platforms to harass, recruit and groom users. It highlights risks to young gamers and organizations.
Key points
- Gaming accounts are cracked using credentials exposed in past breaches or by targeting players through chat, then sold for their in-game assets or currency.
- The article cites a reported 231% increase in hacked Roblox accounts in 2023 compared with 2021, and notes that Steam accounts may be attractive because they can be linked to credit cards.
- Reported gaming-related incidents include leaked builds from GSC Game World, data stolen from Disney’s Confluence server, and a Rhysida ransomware group leak affecting Insomniac Games employees.
- The article describes extremist groups using gaming aesthetics, livestreams and modified games to promote violence and potentially encourage radicalization.
- It reports that individuals in Discord and Telegram networks, including those affiliated with 764, have groomed and extorted minors, with victims subjected to threats and coercion.
- The article urges organizations to watch for data leaks and calls for addressing exploitation in gaming spaces without stigmatizing gaming communities.
Article Details
- Topic
- Criminal activity and violent extremism in gaming communities, including account theft, game and company-data leaks, and online grooming and radicalization.
Threat Actors
Products
Club PenguinMost recently, in June of 2024, Disney’s Confluence server was hacked by individuals believed to be fans of the massively multiplayer online game (MMO) Club Penguin.DiscordThis targeting is particularly prevalent on the darknet adjacent platform Discord, where there have been numerous instances of children being groomed for violence and/or sexual exploitation.FortniteThe targets of these hacking efforts most often include user accounts on a variety of online games, notably League of Legends, Minecraft, Fortnite, and Roblox.League of LegendsThe targets of these hacking efforts most often include user accounts on a variety of online games, notably League of Legends, Minecraft, Fortnite, and Roblox.MinecraftThe targets of these hacking efforts most often include user accounts on a variety of online games, notably League of Legends, Minecraft, Fortnite, and Roblox.RobloxThe targets of these hacking efforts most often include user accounts on a variety of online games, notably League of Legends, Minecraft, Fortnite, and Roblox.SteamIn addition to the games themselves, gaming platforms such as Steam have also been increasingly targeted; these accounts are often even more appealing to hackers as they may be linked to credit cards and can thus allowTelegramFor instance, the white supremacist “Terrorgram” network on Telegram consistently posts “Saints Calendars” and “Saints Cards” meant to commemorate individuals—dubbed “saints”—who have carried out far-right attacks.