Actors Bait Discord Users With Free Nitro Version to Phish Steam User Credentials

  • Discord users are targeted by a scam parading as an invite to download the Discord Nitro and enjoy it for free.
  • The spoofed landing page asks for Steam credentials in a fake pop-up that looks like the legit stuff.
  • The scam will show Users will see free Nitro advert that leads to a popup window asking for credentials.

Actors are now deploying a phishing campaign targeting Discord users with a message that offers a fake free month of Nitro. Victims that take the bait end up on a spoofed website that looks like a legitimate Discord page where a fake pop-up appears asking for the user's Steam credentials. Needless to say, the login user and password are stolen by the actors and nothing is given.

source: Malwarebytes

The unidentified actors start their phishing campaign with a message sent to Discord direct messages that presents a Discord "Niltro" URL supposedly giving away one month of free Nitro and asks the recipients to link their Stream account.

source: Malwarebytes

If the targets do not see the misspelling and actually click the URL, they get redirected to a legit-looking Discord landing page with a "Get Nitro" button. Clicking this button opens up a Steam-like pop-up window which is not really that, but it's part of the phishing website and cannot be dragged.

After the victims enter their credentials they get an "incorrect password" alert. However, behind the page itself, the login information is stored.

source: Malwarebytes

The actors use the 195[dot]133[dot]16[dot]40 IP for this phishing campaign, and Malwarebytes also found more than one hundred other scam-related domains on this IP, such as:

  • 1nitro.club
  • appnitro-discord.com
  • asstralissteam.org.ru
  • discord-steam-promo.com
  • discordgifte.com
  • dicsord-ticket.com
  • discord-appnitro.com
  • ds-nitro.com
  • nitro-discordapp.com
  • nitrodsgiveways.com
  • steam-nitro.online

This is a great way to compromise your Steam account and privacy from all linked accounts. Steam users should stay aware of such scams and avoid falling for Discord Nitro or other game-related scams offering easy and suspicious benefits.

REVIEW OVERVIEW

Latest

Why Is Demon Slayer So Popular?

In August 2019, the world suddenly started talking about an anime series that had just released its nineteenth episode. Fast forward to...

F1 Live Stream 2022: How to Watch Formula 1 Without Cable

There's not much time until the 2022 Formula 1 World Championship gets underway - the first race is scheduled for late March,...

Disney+ Announces Basketball Series Inspired By Award-Winning Book The Crossover

Disney Plus announced a new basketball-themed drama series that is set to land on the streaming platform, drawing inspiration from the critically...
For a better user experience we recommend using a more modern browser. We support the latest version of the following browsers: For a better user experience we recommend using the latest version of the following browsers: Chrome, Edge, Firefox, Safari