Feeds

Everything you ever wanted to know about Xbox hacking

Cracking gameplay laid bare

Intelligent flash storage arrays

DDoS for hire scams

Botnet for hire services have sprung up on the back of such illicit activities.

"Dedicated Botnet groups will charge a fee for desperate gamers to set up a botnet and booter for them," Boyd told El Reg. "Depending on the game, many will award you the win should the host drop out, or give you a similar advantage. You can also force the game to make you the host via different method, which has other advantages."

Such attacks are explained in greater depth in a blog posting by Boyd here.

Hacking in the world of Xbox Live can also adopt a social networking guise.

"There are friend request spam tools which flood your Xbox dashboard with unending friend requests. After effects can range from crashes, when trying to block these attacks, to general slowdown on your network," Boyd added.

A video of a presentation given by Boyd at last October's SecTor.ca conference, entitled Game Over Man, Gamers under Fire., can be found here. A related presentation can be found here.

Sunbelt added to this content with guide to best practice, published on Thursday.

Boyd suggests a number of top tips to avoid getting pwned while playing shoot-em-ups or other online games, that are well worth repeating.

  • Never give someone your login details in exchange for anything.
  • Avoid game cheats and other items sold on Youtube videos. This is a risk because many cheat sellers are malicious.
  • Remove credit card details from accounts registered with gaming companies. Avoid signing up for automatic renewal.
  • Use pre-paid cards to pay for accounts, where possible, rather than personal debit or credit cards.
  • Try to use aliases - not your real name - when you sign up for online gaming accounts.

Boyd's extensive research doesn't even touch on the growing trade in Trojans designed to steal login credentials for online games such as World of Warcraft and many others. Such strains of malware most often crop in in attacks in the far East but are certainly not restricted to that area and far from limited to WoW. ®

Security for virtualized datacentres

More from The Register

next story
Knock Knock tool makes a joke of Mac AV
Yes, we know Macs 'don't get viruses', but when they do this code'll spot 'em
Feds seek potential 'second Snowden' gov doc leaker – report
Hang on, Ed wasn't here when we compiled THIS document
Why weasel words might not work for Whisper
CEO suspends editor but privacy questions remain
DEATH by PowerPoint: Microsoft warns of 0-day attack hidden in slides
Might put out patch in update, might chuck it out sooner
BlackEnergy crimeware coursing through US control systems
US CERT says three flavours of control kit are under attack
prev story

Whitepapers

Why and how to choose the right cloud vendor
The benefits of cloud-based storage in your processes. Eliminate onsite, disk-based backup and archiving in favor of cloud-based data protection.
Getting started with customer-focused identity management
Learn why identity is a fundamental requirement to digital growth, and how without it there is no way to identify and engage customers in a meaningful way.
Reg Reader Research: SaaS based Email and Office Productivity Tools
Read this Reg reader report which provides advice and guidance for SMBs towards the use of SaaS based email and Office productivity tools.
Saudi Petroleum chooses Tegile storage solution
A storage solution that addresses company growth and performance for business-critical applications of caseware archive and search along with other key operational systems.
Internet Security Threat Report 2014
An overview and analysis of the year in global threat activity: identify, analyze, and provide commentary on emerging trends in the dynamic threat landscape.