Cybercriminals are reportedly attempting to trick users of the Steam video game digital distribution service into visiting a phishing site that pretends to give away new game skins, but actually steals login credentials.
Researcher “nullcookies” first reported the fraudulent giveaway promotion in a Twitter post late last month. BleepingComputer followed up on the post and determined that the actor or actors are attempting to lure in victims via comments made to Steam profiles. These comments falsely state that the recipient has won a weekly giveaway and can claim his or her prize on giveavvay.com, a malicious website.
The malicious site further perpetuates the scam by showing what appears to be a $30,000 giveaway promotion featuring 26 days worth of free skins for the multiplayer first-person shooter game “Counter-Strike: Global Offensive.” Site visitors are instructed to click on sign-in button, which opens up a fake Steam login form where the victims can enter their information for the attackers to steal, Bleeping Computer reports.
The site reportedly even creates a legit “Steam Guard” security request (for logins from unrecognized ..
Support the originator by clicking the read the rest link below.
