INVASÕES DE CONTAS E ANÁLISE DE SEGURANÇA DE PLATAFORMAS DIGITAIS DE VENDAS DE JOGOS

Abstract

This study analyzes the security of communications in digital game distribution platforms, considering the growing value associated with user accounts and incidents related to credential compromise. Seven platforms were analyzed: Steam, Epic Games, GOG Galaxy, Ubisoft Connect, EA App, Battle.net, and Xbox. The analysis was conducted through network traffic capture using the Wireshark tool, focusing on TLS protocol parameters such as version, cipher suites, cryptographic algorithms, presence of forward secrecy, and CDN usage. The results indicate that most platforms employ efficient and up-to-date protection mechanisms, with the exception of Battle.net. Additionally, a survey conducted with 112 participants revealed that 61.6\% reported experiences with unauthorized access to their accounts, predominantly associated with phishing and the use of malicious software. It was also observed that Steam concentrated the highest number of reported account compromise incidents among the analyzed platforms, despite presenting one of the highest levels of security according to the technical requirements analysis.