Steam Phishing Campaign Steals Credentials, Hijacks Accounts

[silversurfer]

Content source

https://www.bleepingcomputer.com/news/security/steam-phishing-campaign-steals-credentials-hijacks-accounts/

A new phishing campaign is doing the rounds on the Steam game distribution platform, attempting to trick people into handing over their credentials via a roulette-style game promising free keys.

The fraudsters funnel the Steam users to the phishing websites with the help of a redirector domain which is hidden behind a URL shortened using t.co, Twitter's link-shortening service.

The phishing sites are promoted on the Steam platform using already hijacked accounts which deliver the shortened URLs to their friend list using the Steam chat.

Phishing message in Steam chat​

Fresh “video games” site welcomes new users with Steam phish | Malwarebytes Labs

Over the weekend, I received this unsolicited message from an acquaintance on Steam: 1 free game for new users!Take the game...

blog.malwarebytes.com