Here is the Slashdot posting: Major Spike in Security Threats To Online Games
I swear, if it weren’t for Slashdot, I would have never found out about this. The main article (which is hosted on Gamasutra) deals with a very simple analysis on why criminals “hackers” are beginning to strike the online gaming community. Some of the reasons given include:
1) The Online Gaming industry being a moneypot. Massively Multiplayer Online Games are popular. Too popular.
2) The fact that some people out there are actually willing to pay more than five dollars for someones *insert online game here* character with what is considered to be “epic” gear.
3) Criminals are criminals, and they’re just moving on to the next logical thing.
4) People are susceptible to manipulation. (Social engineering is a wonderful thing.)
I personally feel as if this was inevitable, and I honestly seen this coming a mile away. Anything and everything can be compromised, and people don’t often think about their online avatars being one of those things. I am even guilty of feeling as if nobody would even bother hacking my accounts (be it for Steam, City of Villains, or otherwise). Even though I say that my virtual personas have absolutely no value to them at all, apparently gold farmers and account thieves think otherwise.
What are developers doing about this, though? Warning users of the dangers of account compromise and not buying gold apparently isn’t the only thing they should do. Maybe they should also take Blizzard’s lead.
As mentioned in the article:
“There are also some possible technical aides. For example, Blizzard has introduced the World Of Warcraft authenticator RSA key generator. This is a physical token device that allows you to augment account security by entering a specially generated password created by the device every time you log in.”
You can buy this key generator for a measley $6.50. I honestly believe that things like this should be free, and should be an expectation met by the company that just so happens to throw around millions of player’s personal information within their accounts. But then again, at least it isn’t as bad as charging money for in-game goodies that are only available for a short amount of time.
Right?
But at the end of the day, I think it comes down to (yet again) the user’s ability (or lack thereof) to avoid situations where social engineering could get the best of them. Being mindful of what information you give to whom, what passwords you create, and who shares your accounts could save almost anyone a serious amount of grief and trouble when it comes to avoiding account hacking.