AI and gaming-oriented phishing kits are making it easier for threat actors to victimize young gamers, according to one firm

Between July 2023 and July 2024, a cybersecurity firm examined its protection ecosystem metrics to determine how cybercriminals have been targeting young gamers.

Eighteen games were chosen for the data analysis, and the majority of attacks encountered in the firm’s customers were linked to Minecraft, Roblox, and Among Us.

Overall, more than 3m attempted attacks (masquerading as Minecraft-related downloads) were detected throughout the reported period. A surge of 30% was also noted for the data of H1 2024 compared to that of H2 2023.

Typical attack methods

To lure young gamers, cybercriminals have been found to use the following tactics in their phishing and website spoofing activities:

  • Offering new or varied “skins” for game characters: Essentially involving clothing or armor that can enhance the capabilities and invincibility of game characters, such skins can be easy to procure; but those that are extremely rare (and therefore more desirable) can be dangled by scammers to lure young gamers.
  • Offering in-game currency: Disguised as freebies or prizes for performing certain activities on malicious websites, scammers have used offers of in-game currency to trick young gamers into supply login information and other sensitive data as part of a fake “verification step”.
  • Using generative AI to automate and personalize phishing attacks that are more likely to deceive young gamers. New advanced phishing kits have been made available on the Dark Web to allowing an increasing number of scammers and cybercriminals to deploy highly effective phishing sites that mimic popular gaming platforms.

According to security expert Vasily M Kolesnikov, Kaspersky, the firm sharing its data analysis of cyber threats against young gamers, attacks on children have been a common vector of cybercriminals’ activities in the reporting period. “That’s why cyber hygiene education and the use of trusted cybersecurity solutions are a ’must-have’ in building children’s safety in the online environment. By fostering their critical thinking, responsible online behavior, and a strong understanding of the risks, we can create a safer and more positive online experience for this generation of digital natives,” Kolesnikov said.