Can Playing Games Get You Hacked?

Summary

The video examines whether simply playing games can get a player hacked. Its answer is yes, but direct attacks through a game are relatively uncommon. More often, players are compromised by running malicious downloads, entering credentials on fake sites, trusting scammers, or being affected by a breach at a gaming company.

1. The game itself can contain vulnerabilities

Online games process data from other players and servers. If that data is handled insecurely, a bug can sometimes let an attacker crash a game or execute code on a player’s computer. The video describes examples involving malicious custom content, vulnerable networking or scripting systems, and older multiplayer games. It also distinguishes account or IP exposure from full control of a computer.

The opening anecdote illustrates the difference: a Counter-Strike 1.6 server plugin could remotely trigger a CD tray to open using an old game command. It startled players but did not compromise their computers; Valve later added a setting to block such commands.

The video’s assessment is that this risk is lowest when playing an updated game on official servers and higher around old, unmaintained games, community servers, and custom content. It also notes that vulnerable anti-cheat drivers have been abused in ransomware attacks—but in the cited cases, attackers were already inside the victims’ systems.

2. Downloads and programs associated with games are a major risk

Malicious software has appeared in games and updates distributed through Steam, as well as in mods, Workshop items, cheats, cracked games, and fake game downloads. The video says a game that was safe at release could become malicious through a later developer update. Steam’s update approval measures may help against a stolen developer account, but not if the developer is malicious.

A particularly risky category is information stealers. These can take saved passwords, Steam or Discord accounts, cryptocurrency wallets, and session cookies—which may let an attacker bypass passwords and two-factor authentication. The video also warns about fake indie-game playtests sent through Discord, including messages sent from compromised friends’ accounts.

3. Scams often target the player directly

No software exploit is needed if a victim is tricked into handing over access. Examples include:

• Fake “your account was reported” messages directing users to supposed Steam support.
• Fake tournament invitations and login pages that imitate Steam or FACEIT, including fake browser windows and QR-code flows.
• Fake trade bots and trades that substitute a scammer’s account for the intended recipient.

The video emphasizes that Steam support will not ask for credentials or verification through chat or Discord. It also notes that two-factor authentication remains useful, but cannot reliably protect an account after malicious software steals an active session.

For CS2, the video highlights trade protection introduced in July 2025: eligible trades can be reversed within seven days, with a month-long trading restriction afterward.

4. Gaming-company breaches can affect players despite good habits

A breach at a platform or publisher can expose user data independently of what an individual player does. The video discusses the 2011 PlayStation Network breach and a reported Capcom ID breach, while contrasting them with a 2025 claim about Steam accounts that Valve said was not a Steam breach. Leaked email addresses can also enable convincing follow-up phishing attempts.

AI and future risks

The speaker argues that AI may make it faster and cheaper to discover and exploit software vulnerabilities, potentially increasing risk for games—especially older ones that no longer receive patches. AI tools might also help users examine suspicious links or processes, but the speaker cautions that they can be wrong and should not be treated as an authority. Passwords should never be pasted into them.

Practical guidance

• Be cautious about anything you download or run outside the game itself, including files from friends.
• Treat cheats, cracks, unfamiliar mods, and unsolicited game-test links as high risk.
• Use unique passwords and enable two-factor authentication.
• Verify tournament and support links through official channels; never give credentials or security codes to a supposed support agent.
• Keep games and software updated where possible, while recognizing that updates cannot eliminate every risk.

Reviews, guides, or tutorials

None are presented; the video is an explanatory security analysis.

Main speaker and sources

The video is narrated by Arur of Salut Tech. It cites findings and statements from researchers and organizations including Check Point, Microsoft, Valve, Kaspersky, Bitdefender, Malwarebytes, Acronis, Group-IB, Flare, the FBI, and other security researchers and companies.