Beware: Free Discord Nitro phishing targets Steam gamers

guest · Nov 4, 2021

Beware: Free Discord Nitro phishing targets Steam gamers
November 3, 2021
https://www.bleepingcomputer.com/ne...-discord-nitro-phishing-targets-steam-gamers/

A new Steam phishing promoted via Discord messages promises a free Nitro subscription if a user links their Steam account, which the hackers then use to steal game items or promote other scams.

The phishing scam is being conducted by many Discord accounts controlled by the threat actors or as automated bots that send other users links to what is supposedly a guide on how to receive Discord Nitro for free.

"See, here free nitro 1 month, just link your Steam account and enjoy," reads the phishing messages sent to Discord users as shown below.
Click to expand...

While this sounds like a promotional campaign (other than the grammar), the links take victims to a phishing site that the attackers made to look like a legitimate Discord page promoting the Nitro feature.

In reality, the pop-up is a new window opened right on the phishing page, so whatever Steam credentials are entered are sent directly to the hacker's server.
Click to expand...

Nitro as bait
The latest scam analyzed by Malwarebytes is very similar to the one seen by BleepingComputer in the Summer of 2019. However, with that scam, threat actors used a "free game" as bait to serve victims with a fake Steam single sign-on page.

As these landing URLs get reported and blacklisted, actors register new ones and move their malicious operations to new infrastructure, as shown by the list below shared by Malwarebytes.
Click to expand...

Malwarebytes: This Steam phish baits you with free Discord Nitro

Weeks ago, we talked about the one effective lure that could get a Discord user to consider clicking on a scam link they were generously given, either by a random user or a legitimate contact who also happened to have fallen for the same ploy: free Discord Nitro subscriptions.

And similar to how scammers repeatedly prey on Discord users, they also prey on Steam users (Remember that “I accidentally reported you” scam?).
There’s novelty, however, in scammers preying on both at the same time. It’s not something you normally come across every day.
Click to expand...

Rasheed187 · Sep 13, 2022

Here is another example of a nifty phishing technique called ''browser in the browser'', even experienced users may fall for this. However, this also means that 2FA via authentication apps and SMS is pretty crap.

A new threat emerged out of nowhere, and its name was browser-in-the-browser. A researcher with the moniker mr.d0x was the first to describe this phishing technique, in spring 2022. Using the technique, hackers create a fake browser window on a phishing resource, which at first glance is indistinguishable from the authentic one. Threat actors decided to take advantage of the fact that Steam uses a pop-up window for user authentication instead of a new tab. Since browser-in-the-browser technology poses a significant risk to users, we decided to analyze it in detail using an example of a phishing kit located on a resource that mimics Steam. CERT-GIB has warned Valve about the threat.
Click to expand...

https://blog.group-ib.com/steam

Log in or Sign up

Beware: Free Discord Nitro phishing targets Steam gamers

guest Guest

Rasheed187 Registered Member

Log in or Sign up

Beware: Free Discord Nitro phishing targets Steam gamers

guest Guest

Rasheed187 Registered Member

Useful Searches