In this campaign, hackers used 1951331640 as an IP address. Behind the scenes, though, their Steam credentials have already been stored on the fraudulent website. When Discord users key in their Steam credentials in the fake pop-up, it will show them the error message saying, “The account name or password that you have entered is incorrect”. A normal pop-up does not act like this,” the Reddit user said at the time. If you scroll up and down on the original page, the Steam sign in the window goes with it. “If you try to drag the window off of the parent chrome window, what happens? You can’t. The Reddit user discovered the pop-up is not a pop-up.Ī new front opens up in the war for brand safety Free download Researchers said the tactic is like one fraudsters used about two years ago, described here by Reddit user /Bangaladore. “Clicking the “Get Nitro” button opens something that deceptively resembles a Steam pop-up, when in fact, it’s actually not a separate window but a part of the website itself,” said researchers. The URL misspells “Nitro” as “Niltro.” If victims do not see the misspelling and click on the URL, it redirects them to a legitimate-looking Discord landing page with a “Get Nitro” button. It claims that all the recipient has to do is just link their Steam account “and enjoy.”
The phishing campaign starts with a message sent to a user’s direct messages inbox telling the potential victim they can get one month of free Nitro. It is either propagated by bot accounts or scammer-controlled accounts. Researchers said the scam is active and circulating Discord.
IT Pro News in Review: Microsoft to buy Discord, Intel plays catch-up and the end of LG smartphones.
Discord reportedly rejects Microsoft's takeover offer.Sony inks integration deal with chat app Discord.Criminals target Discord to spread malware.
0 kommentar(er)
