SecurityBrief New Zealand logo
New Zealand's leading source of cybersecurity and cyber-attack news
Story image

Are Kiwis winning or losing when it comes to gaming security?

By Mitchell Hageman
Wed 27 Apr 2022

It's safe to say the gaming landscape has changed significantly over the years. Gone are the days of the first-gen ATARI consoles and Nintendo Gameboys, both of which had no internet connection or access. Whether it's online via a Sony or Microsoft Console or a PC, the internet now drives the future of gaming. 

What started as a simple timewaster has now evolved into a multibillion-dollar industry, encompassing sports, competition and celebrity. Online gaming has created endless opportunities for creators and interested parties to share their gaming experiences with the world, and new communities are popping up each and every day.

Many of these communities are based right here in Aotearoa, and according to the IGEA NZ 2022 report, COVID-19 has increased gaming statistics significantly. 3.7 million Kiwis (73%) were reported to play video games in general, with one in three reported to actively participate in posting gameplay and communicating online.

Communities such as esports, live/twitch streaming and game development are also on the rise in NZ, with 86% of respondents believing that the gaming industry is important for our economy and 72% saying that the government should incentivise the gaming industry.

So as a country, it's clear we love gaming and are entering the realm at rapid speed. But as with all online activity, significant risks come with this kind of rising engagement. The gaming space is a breeding ground for cybersecurity threats and scams, with threat actors who exploit both the technical and psychological side of the gaming experience.

Kiwi gamers have been hit hard financially in the past, with a Norton study revealing that two out of five gamers in New Zealand have experienced a cyber attack in 2021. The average amount of money lost in these attacks is more than $700, which is concerning given the fact that a large majority of gamers are still under the age of 18. In comparison, US gamers only lost on average $104, signalling a significant problem in Aotearoa.

67% of respondents were subject to a financial impact of some kind, and previously reported in a recent Techday article, NortonLifeLock's senior director APAC Mark Gorrie called for better gaming safety.

"New Zealand is a small affluent nation, making it a prime target for cybercriminals. The financial losses of gamers should serve as a wake-up call to gamers to start improving their digital hygiene," he said.

Online gamer BigCheeseKIT also stated in the article that the nationwide gaming security issue was widespread, and various communities in the casual and professional gaming sectors are at risk.

"I've learned that when you're gaming online, it's so important to be mindful of who you are friends with online and what information you share when gaming online. While this is especially true for professional gamers who have that public profile, it's clear this goes for any online gamer," he remarked.

Doxing was a key threat discovered in the survey, and nearly one in five (19%) reported that they had been doxed or had personal information stolen and shared publicly online. Many Kiwi gamers were also found to be exploiting loopholes and cheats to gain a competitive edge, therefore heightening the risk of being attacked and exploited.

"Unfortunately, cybercriminals are hyper-aware of the market for exploits and are using them to scam those seeking advantage in the usual ways," said Gorrie.

"They use dodgy links and hide malware in downloads that are advertised as rare items, in-game currency, or exploits to provide a competitive edge. Clicking a malicious link can lead to losing control of your data, passwords, accounts and financial details."

While there are a multitude of threats out there in the NZ gaming community, there are also forces at work to try to keep gamers safe. With esports being one of the key gaming trends on the rise, we spoke to the CEO of the New Zealand Esports Federation, Jonathan Jansen, who revealed what is being done to help keep the sport safe and what gamers can do to increase their personal safety.

"Due to its rigid structure and nature, esports is a much more secure way of engaging in gaming than being left to your own devices on the world wide web," he says.

Nothing is without risk however, he says.

"Speaking to gaming generally, cybersecurity issues may include things such as the source of where you download your games, registering for websites/games using the same passwords, lack of information about how your information is stored, encrypted or processed, sharing of game accounts linked to personal information, social engineering and phishing."

Jansen says that being informed and educated is the key to harnessing and promoting safe gaming behaviour, and the NZESF have strict standards and security practices in place to prevent a variety of cybersecurity issues.

"Education plays a large role in creating safer esport communities," he says.

"The first line of defence is the New Zealand Esport Federation Sanctioned Event process. Esport organisations who have had their processes verified to a high standard, including appropriate management of data, police background checks and other best practices will use our mark as a sign of trust."

On advice for casual and competitive gamers in New Zealand, Jansen believes there are a few key things to keep in mind, mainly involving being aware and cautious around opportunities that arise.

"If it sounds too good to be true – it usually is! It's tempting for gamers to go out there looking for ways to gain advantages in games, and often times you will find them, but they are never what they appear to be."

He recommends only downloading verified gaming content through official channels and making every effort to protect your private and personal data online. Checking URLs for spelling errors, ensuring a safe lock icon is present, and ensuring data is encrypted are just some of the ways to keep safe. 

While there is currently no funding for esports safety, Jansen says the NZESF is putting many resources into keeping the sport safe.

"At this stage the NZESF is working to create what resources and process we can to make the esport space a safe place."

Netsafe also provides a variety of free resources on their website to advise Kiwi gamers on how to keep safe online. They recommend checking the safety and privacy features on any device you are gaming on and reaching out for support and help when you feel like your security has been breached.

Keep It Real also has helpful NZ specific advice for parents of younger console and PC gamers to help them keep safe online, with links to the NZ related official security sites for the gaming channels.

While we are making efforts to keep gamers safe, our NZ gaming community still needs to be "on top of their game" to stay ahead in these times of heightened cyber risk.

In the words of Mark Gorrie on the state of NZ gaming security, "Cyber criminals will charge you for a fake cheat and then steal your financial information or logins. In their own words, Kiwi gamers need to 'get good' and avoid these dangers as well as have strong online security software to help stop breaches from occurring." 

Public Interest Journalism Fund logo
Public Interest Journalism funded through NZ On Air.
Related stories
Top stories
Story image
Tech job moves
Tech job moves - Adatree, Brother, Databricks, Nutanix & Rubrik
We round up all job appointments from May 20-26, 2022, in one place to keep you updated with the latest from across the tech industries.
Story image
Cybersecurity
Could New Zealanders initiate a cyber attack from within?
The threat landscape is significantly increasing worldwide, and the opportunities it presents are a growing concern in Aotearoa.
Story image
PIJF
The path to bolstering supply chain security in New Zealand
A significant amount of today's business and leisure activity relies on IT supply chains. From complex international freight trades to local small business distribution channels, any supply chain that involves IT infrastructure serves as a crucial tool in our daily lives. 
Story image
Microsoft
Microsoft NZ and TupuToa to boost diversity in cybersecurity sector
Microsoft NZ has teamed up with TupuToa to co-develop a cyber security employment programme specifically aimed at creating more diversity in Aotearoa's cybersecurity sector.
Story image
New Relic
New Relic launches vulnerability management platform
New Relic has introduced New Relic Vulnerability Management to help organisations find and address security risks faster and with greater precision.
Story image
Phishing
Vishing attacks reach all time high - Agari and PhishLabs
"Hybrid vishing campaigns continue to generate stunning numbers, representing 26.1% of total share in volume so far in 2022."
Story image
Kubernetes
Sysdig unveils new Kubernetes troubleshooting and cloud innovations
Sysdig has introduced two new innovations that look to help bolster cloud services and simplify Kubernetes troubleshooting.
Story image
Cyber attacks
Devastating cyber attacks expected to hit energy sector
Energy executives anticipate life, property, and environment-compromising cyber attacks on the sector within the next two years.
Story image
Ponemon Institute
Email revealed to be riskiest channel for data loss
More than half (60%) of organisations experienced data loss or exfiltration caused by an employee mistake on email in the last 12 months.
Story image
Microsoft
Global cybersecurity insurance market worth $11.5b this year
Future Market Insights finds the cybersecurity insurance market is expected to reach USD$11.5 billion in 2022, growing to $61.2 billion in 10 years.
Story image
Training
Trojan cyber attacks hitting SMBs harder than ever - Kaspersky
In 2022 the number of Trojan-PSW detections increased by almost a quarter compared to the same period in 2021 to reach 4,003,323.
Story image
Check Point
Check Point and CCTV expert join forces to boost protection
The partnership will involve Check Point Quantum IoT Protect Nano Agent being embedded in Provision-ISR’s CCTV cameras for on-device runtime protection.
Story image
Customer experience
Gartner recognises Okta for abilities in Access Management
Okta has announced it has been recognised as a Customers' Choice for the fourth time in a row in the Gartner Peer Insights "Voice of the Customer" report.
Story image
Cybersecurity
Accenture - a collective security approach a driving factor for cyber resilience
With the approaching Davos World Economic Forum upon us, it is even more imperative to discuss the impact of cybersecurity on business operations leading into the future.
Story image
Employment
Tech job moves - Forcepoint, Malwarebytes, SolarWinds & VMware
We round up all job appointments from May 13-20, 2022, in one place to keep you updated with the latest from across the tech industries.
Story image
Vectra AI
Understanding the weight on security leader’s shoulders, and how to shift it
Millions of dollars of government funding and internal budgets are being funnelled into cybersecurity to build resilience against sophisticated threats, indicating how serious this issue has become.
Story image
Identity and Access Management
The post-pandemic workforce requires secure IAM capabilities
HID Global discusses what identity and access management means for organisations in today's convoluted digital world.
Story image
Cybersecurity
What every CISO must answer to enable a best-in-class security operations program
It has been widely reported recently that South Australian government employees have been the victims of a cyberattack.
Story image
Ransomware
CERT NZ releases first Cyber Security Insights for 2022
CERT NZ has released Quarter One: Cyber Security Insights 2022, which offers an overview of reports about cybersecurity incidents affecting New Zealanders.
Story image
Artificial Intelligence
Gartner reveals top three tech trends for banks this year
Gartner says generative artificial intelligence, autonomic systems and privacy-enhancing computation are gaining traction in banking and investment services.
Story image
BYOD / Bring Your Own Device
How zero trust can lead the battle against ransomware
SecOps teams champion a zero trust strategy to support the fight against the escalating risk of cybercrime and help monitor threat actors across a network.
Story image
Cybercrime
The ups and downs and runarounds of catching cybercriminals in NZ
We're becoming more and more aware of cybercrimes but how many criminals actually get caught? The New Zealand police explain why the answer is complicated.
Story image
Data Protection
Barracuda launches new capabilities for API Protection
"Every business needs this type of critical protection against API vulnerabilities and automated bot attacks," Barracuda says.
Story image
Silver Peak
The path to an adaptive, modern network
Managing and securing the network looks different than it did just two years ago—especially given that most of these networks are made up of multi-generations of infrastructure stitched together over time.
Story image
Managed service provider
Barracuda MSP Day 2022 highlights MSP opportunities
Barracuda Networks has released a report showing global services-related MSP revenue is set to increase by more than a third in 2022 compared to 2021.
Story image
Microsoft
Elevation of Privilege the top 2021 Microsoft vulnerability
BeyondTrust has released its 2022 Microsoft Vulnerabilities Report, finding that Elevation of Privilege is the top vulnerability category for the second consecutive year.
Story image
Data Protection
Information management capabilities to meet privacy requirements
Organisations with customers or operations across more than one country face a spate of new and proposed privacy and data protection laws.
Darktrace
Threat actors are exploiting weaknesses in interconnected IT/OT ecosystems. Darktrace illuminates your entire business and takes targeted action to stop emerging attacks.
Link image
Story image
Migration
Let’s clear the cloud visibility haze with app awareness
Increasingly, organisations are heading for the cloud, initiating new born-in-the-cloud architectures and migrating existing applications via ‘lift and shift’ or refactoring.
Story image
Malware
'Alarming' rise in ransomware threats - Verizon report
As criminals look to leverage increasingly sophisticated forms of malware, it is ransomware that continues to prove particularly successful.
Story image
Phishing
WhatsApp and QR codes the next scam threat - report
KnowBe4 has warned it expects to see an increase in QR Codes and the WhatsApp chat platform being used for phishing and other scams. 
Story image
Remote Working
Successful digital transformation in the hybrid work era is about embracing shifting goalposts
As organisations embraced remote working, many discovered they lacked the infrastructure needed to support history’s first global load test of remote work capabilities.
Story image
Ransomware
Alarming surge in Conti Ransomware Group activity - report
A new report has identified a 7.6 per cent increase in the number of vulnerabilities tied to ransomware in Q1 2022.
Story image
Cybersecurity
Asia Pacific plagued by sophisticated bad bots - report
The three most common bot attacks were account takeover, content or price scraping, and scalping to obtain limited-availability items.
Story image
Ransomware
Employees on the frontline of cyber defense - report
In the first quarter of 2022, employees found themselves more than ever at the frontline of cyber defense, according to a new report from Kroll. 
Story image
Ransomware
APAC organisations fail to disclose ransomware breaches
85% of organisations in APAC were breached by ransomware at least once in the past five years, but only 28% publicly disclosed the incident.
Story image
Amazon Web Services / AWS
RedShield leverages AWS to scale cybersecurity services
"Working with AWS gives RedShield the ability to mitigate significant application layer DDoS attacks, helping leaders adopt best practices and security architectures."
Story image
Malware
Fortinet introduces self-learning AI in latest offering
Fortinet is introducing self-learning AI capabilities in its new network detection and response offering, FortiNDR.
Story image
Surveillance
i-PRO releases smallest AI-based surveillance camera on the market
The new i-PRO mini network camera is now available, with a pocket-sized form factor and full AI analytics functionality.
Story image
Training
Infosec unveils role-guided cybersecurity training roadmaps
Infosec Skills Roles maps hands-on training and certifications to the 12 most in-demand cybersecurity roles to maximise training efficiency.
Story image
Cybersecurity
Comcast to use ThreatQuotient for cybersecurity operations
Comcast, the parent company of NBC Universal and SKY Group, has chosen ThreatQ Platform and ThreatQ Investigations to meet their cybersecurity needs.
Story image
Cybersecurity
Cybersecurity prompts upgrade for 1.3 billion electricity meters
ABI Research finds Advanced Metering Infrastructure (AMI) and cybersecurity concerns are prompting the upgrade of 1.3 billion electricity meters by 2027.
Story image
Transport
Third-party automotive apps bear significant privacy risks
Mobile applications for connected cars provide various features to make life easier for motorists, but they can also be a source of risk.
Story image
ChildFund
ChildFund launches new campaign to protect children online
ChildFund says WEB Safe & Wise aims to protect children from sexual exploitation and abuse online while also empowering them to become digitally savvy.