Cybersecurity firm Kaspersky has revealed a startling statistic: between April 1, 2024, and March 31, 2025, it detected over 19 million attempts to download malicious or unwanted files masquerading as popular games favored by Generation Z. Titles like Grand Theft Auto (GTA), Minecraft, and Call of Duty were among the most exploited, indicating a clear trend of cybercriminals capitalizing on gaming popularity to ensnare their targets.
This alarming rise in gaming-related cyberattacks has prompted Kaspersky to launch “Case 404,” an interactive cybersecurity game designed specifically for Gen Z. This initiative aims to educate young players on how to recognize threats and protect their digital worlds while engaging in their passion for gaming.
Gen Z stands out as the most active gaming generation, not only playing more but also exhibiting distinct gaming habits. They surpass Millennials and Gen X in gaming-related spending and frequently switch between numerous titles, driven by viral trends and a desire for new experiences. However, this very spontaneity and openness render them vulnerable, as cybercriminals exploit these habits and the trust players place in various platforms. Over 400,000 users worldwide were affected during the reported period.
Kaspersky experts conducted an in-depth analysis for their new report, using 20 of the most popular Gen Z game titles—ranging from GTA, NBA, and FIFA to The Sims and Genshin Impact—as search keywords. The study, covering Q2 2024 to Q1 2025, identified March 2025 as the peak month, with a staggering 1,842,370 attempted attacks.
Despite its release over a decade ago, the Grand Theft Auto franchise remains one of the most exploited, largely due to its open-world modding capabilities and vibrant online community. Kaspersky detected 4,456,499 attack attempts involving files disguised as GTA-related content. With the highly anticipated release of GTA VI expected in 2026, experts anticipate a significant surge in such attacks, as cybercriminals are likely to exploit the hype by distributing fake installers, early access offers, or beta invites.
Minecraft secured the second spot with 4,112,493 attack attempts, driven by its extensive modding ecosystem and enduring popularity among Gen Z players. Call of Duty and The Sims followed closely with 2,635,330 and 2,416,443 attack attempts, respectively. The demand for cheats and cracked versions around competitive CoD releases like Modern Warfare III fuels malicious activity, while The Sims fans seeking custom content or unreleased expansion packs may inadvertently download harmful files disguised as mods or early access.
Such attacks can infect user devices with various unwanted or malicious software, including downloaders that install additional harmful programs, Trojans that steal passwords, monitor activity, grant remote access to attackers, or deploy ransomware. A common motive behind these attacks is the theft of gaming accounts, which are subsequently sold on dark web marketplaces or closed forums.
Kaspersky’s Global Research & Analysis Team also investigated darknet marketplaces and closed platforms, finding a growing number of advertisements selling compromised gaming accounts and skins. These illicit assets are increasingly visible and accessible, appearing not only on the darknet but also on regular closed forums and Telegram channels.
This trend signifies that the theft of gaming accounts and digital items is no longer confined to niche cybercrime circles but is spreading into more open online spaces. The barrier to entry for selling or buying stolen accounts has significantly lowered, transforming a previously technical, underground practice into a fast, accessible, and global marketplace. For gamers, this means the risk of losing an account or having it resold is now a mainstream threat.
To counter this, Kaspersky has launched “Case 404,” an interactive online game specifically for Gen Z gamers. This cyber-detective adventure immerses players in fictional cases inspired by real digital threats, teaching them to identify scams, phishing attempts, and account takeover tactics prevalent in gaming. Through “Case 404,” Kaspersky aims to equip young players with the mindset and skills necessary to stay secure while pursuing their passion. Players who complete the game also receive a discount on Kaspersky Premium, providing them with reliable tools to protect their gaming and digital lives.
“From open-world blockbusters like GTA to cozy simulators like The Sims, cybercriminals target games across every genre. What unites them is the audience: Gen Z is the most digitally active generation, leaving behind a rich trail of data, clicks, and curiosity. This makes them a prime target – because they’re constantly online, exploring, downloading, and sharing,” commented Fatih Sensoy, senior security researcher at Kaspersky. “That’s why digital self-defense is essential. Learning how to recognize threats should be as natural as leveling up in a game. Through ‘Case 404’, we want to equip young players with tools and instincts to protect their digital identity, their accounts, and their freedom to play safely.”