Skip to content
September 11, 2026
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
    • CVE Alerts
    • CVE Alert Settings
    • Pricing
  • Cyber Criminals
  • Data Leak
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
  • Weekly Recap
Light/Dark Button
  • Home
  • Technique
  • SECURITY OF ONLINE GAMES AND HOW IT CAN BE COMPROMISED
  • Technique

SECURITY OF ONLINE GAMES AND HOW IT CAN BE COMPROMISED

Do Son December 17, 2020 4 minutes read
tech-secu

Online games aren’t new. Consumers have been playing them since as early as the 1990s. However, the market is evolving—games that used to require the computing power of dedicated desktops can now be powered by smartphones, and online gaming participation has skyrocketed.

Online gaming has gone through explosive growth in popularity during the last decade and continues to grow at a great speed. With this growth in popularity and thus in the number of players, the need for security also becomes increasingly clear.

CYBERTHREATS

MMOs are multiplayer video games capable of supporting a large number of players at the same time. They are played over the internet and contain one or more words that persist regardless of the presence of players. In MMOs, players can compete and cooperate, and interact with other people all over the world.

One of the most popular MMORPG out there is Black Desert Online where you can buy Black Desert Silver and items to get stronger in the game.

MMORPG’s are one of the main threat of hackings and scams since it uses currency for buying in-game items and sometimes players get scammed through communication.

A few years ago, cybersecurity scryers predicted that the video gaming industry would be the next big target of cybercriminals. Whether this will come true in the future or not, the average gamer may have little to no idea of what awaits them, much less be prepared for it.

Malware and potentially unwanted programs (PUPs)

Malware and PUPs have been the top-of-mind threats to online gamers and for a good reason. They come in many, many forms—key generators; game cracks; trainers; fake mobile game apps, and game installers consider that every conceivable software related to gaming might have a malicious equivalent in the wild.

Lastly, malware can affect gamers when they connect to infected servers. In the report, Study of the Belonard Trojan, exploiting zero-day vulnerabilities in Counter-Strike 1.6, security experts at Russian antivirus firm Doctor Web investigated Belonard, a Trojan that takes advantage of weaknesses in both Steam and pirated versions of Counter-Strike 1.6 (CS 1.6).

Phishing scams

Steam users are probably more than familiar with the times when phishers used squatted domains to lure them into giving out their credentials to Steam or their favorite third-party trading site, like CS:GO Lounge

sleamcummunity.com and steamcornmunity.com were just two of several new domains that popped up, made to look like a Steam Community page, and used in several campaigns aiming to harvest Steam accounts. We believed that the stolen accounts could be used to lead more Steam users into giving away their credentials as well.

Similarly, a fake CS:GO Lounge domain was registered and mimicked the real trading and bidding site. Criminals behind it were also after Steam credentials. To rub salt to the wound, they even added a Trojan that pretended to be a Steam activation file.

Nowadays, we not only play on consoles or PCs but also our smartphones or tablets. Therefore, we must be careful and pay special attention to those fake apps masquerading as official games, updates, tricks, etc.

Since 2015, there have been various malicious mobile applications masquerading as well-known games, which perform different types of attacks on infected devices. Perhaps one of the most important cases has to do with an Android Trojan hidden among the games at Google Play, which allowed attackers to control devices remotely, thanks to its backdoor capabilities. By imitating games like Plants vs. Zombies 2 or Subway Surfers, it was mainly used to display ads on the compromised device.

WHY Security is needed

Some people may think that security isn’t a big deal when it comes to online gaming. The security of public locations is a big deal because some terrorists might bomb them. Security of a store is a big deal, because people might steal stuff, and a similar thing can be said about the security of digital products, such as software, movies, and music. Spider Solitaire Games are just there for fun and enjoyment, so why is it so important that they are secure as well?

The internet is undergoing explosive growth, bringing along lots of computer security issues. Online games suffer from these problems directly because of the way they are built.

Then there is the economy of World of Warcraft which is huge, and there are many possible ways to transfer real money into and out of the game… Lastly, there is the size of the game’s player base. A game this popular, using this architecture and having such a big economy, is extremely attractive for cheaters, hackers, and even criminals.

SHARE
Share on FacebookShare on XShare on LinkedInShare on TelegramShare on BlueskyShare on Mastodon
Tags: SECURITY OF ONLINE GAMES

Search

Translation

CVE ALERTS
📧

Email Delivery
Get threat intel straight to your inbox.

♾️

Unlimited Vendors
Track every technology in your stack.

🚨

All New CVE Alerts
Be the first to know about new flaws.

⚙️

Custom EPSS Threshold
Filter noise, focus on real risks.

💬

Slack & Teams Webhook
Integrate directly into your SecOps.

🚫

100% Ad-Free
Enjoy an uninterrupted reading experience.

$7/mo
Subscribe Now

🚨 Active Exploits in the Wild

  • CVE-2026-42016CVSS 8.1
    JFrog Artifactory (Self Hosted) versions before 7.133.11 are vulnerable to a privilege escalation attack due to a validation...
    Admin intel📅 Updated: Sep 11, 2026
  • CVE-2026-42018CVSS 7.5
    JFrog Artifactory could return an internal anonymous-user token to an unauthenticated caller when anonymous access is disabled, potentially...
    Admin intel📅 Updated: Sep 11, 2026
  • CVE-2026-20079CVSS 10.0
    A vulnerability in the web interface of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenticated,...
    Admin intelCISA KEV📅 Added to KEV: Sep 9, 2026📅 Updated: Sep 9, 2026
  • CVE-2025-25249CVSS 8.1
    A heap-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2.0 through...
    Admin intelCISA KEV📅 Added to KEV: Sep 9, 2026📅 Updated: Sep 9, 2026
  • CVE-2026-87491
    Out of bounds write in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute...
    Admin intelCISA KEV📅 Added to KEV: Sep 9, 2026📅 Updated: Sep 9, 2026
  • CVE-2026-19490
    Vulnerability in NetScaler ADC and NetScaler Gateway. This issue affects ADC: from 14.1 through 73.32 and from 13.1...
    CISA KEV📅 Added to KEV: Sep 9, 2026
  • CVE-2026-75650CVSS 10.0
    Adobe Commerce is affected by an Improper Neutralization of Special Elements Used in a Template Engine vulnerability that...
    Admin intelCISA KEV📅 Added to KEV: Sep 8, 2026📅 Updated: Sep 8, 2026
  • CVE-2026-81963CVSS 7.8
    Improper link resolution before file access ('link following') in Windows Update Stack allows an authorized attacker to elevate...
    CISA KEV📅 Added to KEV: Sep 8, 2026
Powered by CVE Watchtower

🔴 Live Critical Threats

  • CVE-2026-8778CVSS 9.8
    The MIPL Grouped Checkout Fields for WooCommerce – Customize & Organize Checkout...
  • CVE-2026-82107CVSS 9.6
    IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote...
  • CVE-2026-82100CVSS 9.6
    IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote...
  • CVE-2026-81204CVSS 9.8
    IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote attacker to...
  • CVE-2026-80424CVSS 9.1
    IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote...
  • CVE-2026-79724CVSS 9.8
    IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote attacker to...
  • CVE-2026-78573CVSS 9.8
    IBM ContextForge MCP Gateway 1.0.0 through 1.0.7 could allow a remote attacker...
  • CVE-2026-45764CVSS 9.1
    Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network...
  • CVE-2026-19646CVSS 9.1
    IBM Common Licensing Agent 9.0, Agent 9.0.0.1, Agent 9.0.0.2, ART 9.0, ART...
  • CVE-2026-89094CVSS 9.9
    Forgejo before 16.0.4 allows remote code execution via a crafted template repository...
Powered by CVE WATCHTOWER

Our Websites
  • Penetration Testing Tools
  • The Daily Information Technology
  • Top Exploited CVEs
  • Daily CyberSecurity

    • About SecurityOnline.info
    • Advertise with us
    • Announcement
    • Contact
    • Contributor Register
    • Login
    • Disclaimer
    • DCMA
    • Privacy Policy
    • About SecurityOnline.info
    • Advertise on SecurityOnline.info
    • Contact Us

    When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

    • CVE Watchtower
    • CVE Statistics by Vendor 2026
    • Q2 2026 Report
    • Top Exploited CVEs
    • Bluesky
    • Facebook
    • Linkedin
    • Mastodon
    • RSS
    • Twitter
    • Youtube
    © 2017 - 2026 Daily CyberSecurity. All Rights Reserved.