Transforming Mobile Gaming Security: From Post-Incident Reporting to Real-Time Threat Detection

01 Summary

Company：

A Global Leading Mobile Gaming Platform

Industry：

Gaming

Use Case：

Business fraud prevention

---

Key Results

Total Risk Incidents	80+ cases
Critical Vulnerabilities Resolved	2 key issues addressed (Email Security and Device ID Encryption)
Phishing Hit Rate Reduction	Decreased by 50%
Account Hijacking Rate Reduction	Decreased by 50%
Risk Detection Coverage	From post-incident reporting → real-time risk awareness and interception
Detection Accuracy	70%+ improvement in detection accuracy
User Trust Recovery	Significant boost in player engagement and satisfaction

02 Background & Challenges

In gaming, player accounts are digital assets and prime fraud targets. Widespread issues with account theft, phishing scams, and underground top-up services were driving player complaints and churn. In fact, the account trading economy had grown into a full-fledged underground market.

03 Threat Hunter's Solution

Threat Hunter built a comprehensive Account Security Intelligence Framework, providing real-time monitoring of phishing campaigns, top-up fraud markets, account trading forums, and social media scams. We also collaborated closely with the client to uncover and remediate vulnerabilities in business logic and account security workflows.

3.1 Real-World Incidents

• Phishing Email Campaign Disrupted: In April 2025, we detected a phishing campaign spoofing the client's email domain. Attackers exploited missing SPF, DKIM, and DMARC configurations to send fraudulent login links. We traced the attack infrastructure and assisted the client in fixing their email security protocols. resulting in an 80% reduction in phishing success rates.

• Device ID Exploit Neutralised: A player was tricked into providing device information during an "account swap" scam. Attackers exploited a vulnerability in the platform's account recovery system ited to device IDs. Our investigation led to a permanent fix via secure encryption and process redesign.

3.2 Key Outcomes

• Detected and mitigated over 80 high-risk account fraud incidents within just 3 months, including phishing, underground top-ups, and account takeovers. Through 24/7 monitoring of phishing sites, underground top-up platforms, and account trading networks across global social media and the dark web, Threat Hunter helped the client proactively detect and respond to 80+ account-related fraud events in real time.

• Closed two critical security vulnerabilities - email authentication gaps and device ID exploit - cutting off key fraud attack vectors.

  • Regarding email security, we guided the client to implement SPF, DKIM, and DMARC protocols, which resulted in a dramatic drop in phishing email success rates.

  • For the device ID exploit used in account recovery fraud, we helped the client redesign data encryption logic, effectively blocking fraudsters from manipulating the account recovery process via stolen device IDs.

• Achieved a transformational upgrade in account security - from rule-based defense to intelligence-driven, proactive protection.

  • The client moved from reactive, rules-only security to a fraud intelligence -powered defense model.

  • Account theft rates dropped significantly, with a noticeable reduction in user complaints related to account security.

  • User retention and engagement improved, and the client's brand reputation strengthened globally thanks to enhanced user trust and safer account environments.