Actors Bait Discord Users With Free Nitro Version to Phish Steam User Credentials

  • Discord users are targeted by a scam parading as an invite to download the Discord Nitro and enjoy it for free.
  • The spoofed landing page asks for Steam credentials in a fake pop-up that looks like the legit stuff.
  • The scam will show Users will see free Nitro advert that leads to a popup window asking for credentials.

Actors are now deploying a phishing campaign targeting Discord users with a message that offers a fake free month of Nitro. Victims that take the bait end up on a spoofed website that looks like a legitimate Discord page where a fake pop-up appears asking for the user's Steam credentials. Needless to say, the login user and password are stolen by the actors and nothing is given.

source: Malwarebytes

The unidentified actors start their phishing campaign with a message sent to Discord direct messages that presents a Discord "Niltro" URL supposedly giving away one month of free Nitro and asks the recipients to link their Stream account.

source: Malwarebytes

If the targets do not see the misspelling and actually click the URL, they get redirected to a legit-looking Discord landing page with a "Get Nitro" button. Clicking this button opens up a Steam-like pop-up window which is not really that, but it's part of the phishing website and cannot be dragged.

After the victims enter their credentials they get an "incorrect password" alert. However, behind the page itself, the login information is stored.

source: Malwarebytes

The actors use the 195[dot]133[dot]16[dot]40 IP for this phishing campaign, and Malwarebytes also found more than one hundred other scam-related domains on this IP, such as:

  • 1nitro.club
  • appnitro-discord.com
  • asstralissteam.org.ru
  • discord-steam-promo.com
  • discordgifte.com
  • dicsord-ticket.com
  • discord-appnitro.com
  • ds-nitro.com
  • nitro-discordapp.com
  • nitrodsgiveways.com
  • steam-nitro.online

This is a great way to compromise your Steam account and privacy from all linked accounts. Steam users should stay aware of such scams and avoid falling for Discord Nitro or other game-related scams offering easy and suspicious benefits.

Latest
How to Watch A Royal Christmas Surprise Online from Anywhere
A Royal Christmas Surprise follows Riley Stehenson and Mandla Amitu, an engaged couple who use the holiday spirit to get their parents...
How to Watch The Christmas Ringer Online from Anywhere
Former R&B royalty Nicole finds herself leading the church choir after her manager-fiancé's selfish actions lead to the downfall of her career....
How to Watch Bones of Crows Online from Anywhere
The five-part hour-long drama series Bones of Crows tells its story through the perspective of Cree Matriarch. There is also a Bones...
For a better user experience we recommend using a more modern browser. We support the latest version of the following browsers: For a better user experience we recommend using the latest version of the following browsers: Chrome, Edge, Firefox, Safari