There are so many users, accessing so many different services, and all it takes is the allure of picking up something for nothing to get people to part with their credentials. Phishing scams are rife throughout the world of gaming. The price certainly doesn't reflect how many triple AAA games you have, with a Kaspersky report finding that stolen gaming credentials were trading hands for a little as $14.20 for 1,000 accounts.įour Tips for Avoiding Steam and Discord Phishing Scams Wondering how much your Steam account will change hands for? You'd be surprised at how cheap your credentials are sold off. Users who enter the Steam credentials in the fake pop-up are met with an error message stating that their account name or password was incorrect when in reality, they were stolen the moment the user pressed Enter. The fake Steam login page is incredibly convincing, using the proper URL you would expect to see, even with fake scrolling options and so on. The attackers want you to enter your Steam account credentials on their site, which they'll hoover up. The page still changes to mimic the Steam third-party account link page, but it's built into the original phishing site rather than accessing the Steam service.

However, a pop-up doesn't appear when you select the Get Nitro button on the phishing page. When you link your Steam account to third-party services, a pop-up window appears explaining what you're linking and that you should be aware of scams. Users are prompted to hit the 'Get Nitro' button to begin the link process. Discord Nitro Classic: Understanding the Differences If the target clicks the link contained in the phishing message, they're first taken to a website posing as an official Discord Nitro page, complete with a splash screen advertising the one-month free deal if you link your Steam account. As it usually costs $10 per month, it's a handy phishing lure against a wide range of targets.Ī bot or account controlled by a scammer sends an unsolicited direct message to the target along with a message claiming that 'If you link your Steam account, you'll receive one-month free Discord Nitro,' or words to similar effect. In short, the scam uses a free offer of Discord Nitro, Discord's premium subscription service that comes with a few extra bells and whistles, as a phishing lure. Discord Nitro Used as Phishing Lure for Steam Accounts

Discord nitro on steam