

“Behind the scenes, though, their Steam credentials have already been stored into the scam website.” “When Discord users key in their Steam credentials in the fake pop-up, it will show them the error message saying, ‘The account name or password that you have entered is incorrect,’” the report said. The gambit is intended to fool users into thinking they’re being taken to the Steam platform to enter in their login information - supposedly to fulfil the request to “link” the Steam account with Discord for the free Nitro subscription. New Backbone Perk: 3 Months of Discord NitroĪs Malwarebytes Labs explained in the report, once a victim clicks on the button, the site appears to serve a Steam pop-up ad, but researchers explained the ad is still part of the same malicious site.


But researchers flagged a new approach as noteworthy because it crosses over between Discord and the Stream gaming platform, with crooks offering a purported free subscription to Nitro (a Discord add-on that enables avatars, custom emoji, profile badges, bigger uploads, server boosts and so on), in exchange for “linking” the two accounts. Gamer-aimed Discord scams are just about everywhere. There’s a new scam making the rounds on Discord, through which cybercriminals can harvest Steam account information and make off with any value it contains.
