GTA, Minecraft, Call of Duty among games used as bait in over 19 million attempted cyberattacks

Cybersecurity company Kaspersky has detected over 19 million attempts to download malicious or unwanted files disguised as popular video games – a clear indication that cybercriminals are actively following gaming trends to reach their targets.

From April 1, 2024, to March 31, 2025, games such as Grand Theft Auto (GTA), Minecraft and Call of Duty were among those exploited. According to Kaspersky, Gen Z (born between 1997 and 2012) plays more video games than any other generation.

“And not just more, but differently. They (Gen Z) outpace Millennials and Gen X in gaming-related spending, and instead of sticking to a few favourites, Gen Z jumps between numerous titles, chasing viral trends and new experiences,” Kaspersky noted.

“Yet this same spontaneity and openness also make them vulnerable, with cybercriminals exploiting the habits and trust of these players across platforms. For instance, throughout the reported period, more than 400,000 users worldwide were affected.”

Kaspersky experts conducted an in-depth analysis using 20 of the most popular game titles among Gen Z – from GTA, NBA and FIFA to The Sims and Genshin Impact – as search keywords. The study covered the period from Q2 2024 to Q1 2025, with March 2025 standing out as the peak month, recording 1,842,370 attempted attacks worldwide.

Despite GTA V being released over a decade ago, the Grand Theft Auto franchise remains one of the most exploited, due to its open-world modding capabilities and thriving online community. In total, Kaspersky detected 4,456,499 attempted attacks involving files disguised as GTA-related content.

With the highly anticipated release of GTA VI expected in 2026, experts predict a potential spike in such attacks, as cybercriminals may exploit the hype by distributing fake installers, early access offers, or beta invites.

Minecraft ranked second, with 4,112,493 attempted attacks, driven by its vast modding ecosystem and enduring popularity among Gen Z players. Call of Duty and The Sims followed with 2,635,330 and 2,416,443 attempted attacks respectively. The demand for cheats and cracked versions around releases such as Modern Warfare III fuels malicious activity, while fans of The Sims searching for custom content or unreleased expansion packs may inadvertently download harmful files presented as mods or early access.

As a result of such attacks, users’ devices can be infected with various types of unwanted or malicious software – from downloaders that install additional harmful programmes, to trojans that steal passwords, monitor activity, grant remote access to attackers, or deploy ransomware. One common motive is stealing gaming accounts, which are then sold on the dark web or closed forums.

Kaspersky experts also analysed darknet marketplaces and closed platforms for advertisements selling compromised gaming accounts and skins. The research indicates a growing number of such listings are appearing not just on the darknet, but also on regular closed forums and Telegram channels – making these illicit assets more visible and accessible than ever.

“This shows that the theft of gaming accounts and digital items is no longer limited to niche cybercrime circles – it’s starting to spread into more open online spaces,” Kaspersky said in its statement.

“The barrier to entry for selling or buying stolen accounts has significantly lowered. What was once a technical, underground practice has become a marketplace – fast, accessible, and global. It now takes just a few clicks to join a private Telegram channel and access hundreds of listings offering rare skins, high-rank accounts, and access to premium in-game items. And for gamers, this means the risk of losing an account or having it resold is no longer a rare incident – it’s a mainstream threat.”

To address this, Kaspersky launched an interactive online game, Case 404, created especially for Gen Z gamers. In this cyber-detective adventure, players dive into fictional cases inspired by real digital threats, learning how to spot scams, phishing attempts, and account takeover tactics common in gaming.