As the user clicks on the “Sign in through STEAM” button, a Steam login window pops up.
To perform a custom search or add items to a cart, users are asked to sign in with their Steam credentials. The following screens show the phishing CS:GO site (top) and the actual CS:GO site (bottom). To make the phishing sites appear more legitimate, there is a fake chatbox with randomly selected phrases based on current events. The phishing site looks much like the real one. Cybercriminals will attempt to hijack a Steam account so they can launch other scams and attacks and steal or trade the victim's items. The all-time peak number of concurrent users for CS:GO was 854,801.ĭue to its popularity, the Steam platform has also become a popular target for attack. At the time of this publication, the Steam site was showing more than 700,000 users currently playing CS:GO. How popular? According to statistics on the company website, the Steam platform has between 10 and 20 million concurrent users playing on any given day. Steam is highly popular among gamers as it allows for multiplayer capabilities. Steam offers digital rights management (DRM), matchmaking servers, video streaming, and social networking services, and it provides users with installation and automatic updates of games as well as several community features. Steam has also expanded into an online web-based and mobile digital storefront. Steam is a video game digital distribution service that provides automatic updates for various games. A similar campaign was seen in December 2019 and the campaign is still up with few enhancements, such as using a fake browser pop-up window for login along with some anti-analysis techniques, which are discussed in this blog. These sites use an uncommon phishing technique that is difficult to detect. Recently, the Zscaler ThreatLabZ team came across multiple fake Counter-Strike: Global Offensive (CS:GO) skin websites aimed at stealing Steam credentials.
0 kommentar(er)
