Security News > 2021 > November > Free Discord Nitro Offer Used to Steal Steam Credentials

There's a new scam making the rounds on Discord, through which cybercriminals can harvest Steam account information and make off with any value it contains.

Researchers flagged a new approach as noteworthy because it crosses over between Discord and the Stream gaming platform, with crooks offering a purported free subscription to Nitro, in exchange for "Linking" the two accounts.

"Just link your Steam account and enjoy," the message says, and it includes a link purportedly to do just that.

The gambit is intended to fool users into thinking they're being taken to the Steam platform to enter in their login information - supposedly to fulfil the request to "Link" the Steam account with Discord for the free Nitro subscription.

"When Discord users key in their Steam credentials in the fake pop-up, it will show them the error message saying, 'The account name or password that you have entered is incorrect,'" the report said.

"Behind the scenes their Steam credentials have already been stored into the scam website."

News URL

https://threatpost.com/free-discord-nitro-offer-steam-credentials/176011/