Discord steamcommunity phishing scam

Discord friend gives you $50 steamcommunity card

“$50! Hell yes” 🤑
*click*
*login*
“Gimme gemme gimme!” 🤑

“Huh? I’ve been hacked? How did that happen?”

Obviousy it’s a scam!

People, especially not strangers, or casuals haven’t spoken too in ten years don’t just pop up and give you $50!

Apparently this has been around for years, but I’d not encountered it before.

I’m paranoid, so I don’t fall for these, but they aren’t targetting people like me, they are using a scattergun method to hit every account possible. They reply on the gullible, the overly trusting – and the greedy – to fall for it.

Common sense should send up warning signs the second you see something like this, but people still fall for it.

They are over 125 milliion Steam users, of all ages. If they send out a 100,000 messages and get 0.1% following through, that’s still 100 accounts hacked – and from there used to target others.

There’s a high probability that the phishing site will also try to install malware, trojans, ransomware and or keyloggers onto your system. So yes, clicking on the link for the ‘gift’ is a REALLY bad idea!

A walk through

discord message notification — Stage 1: Discord message notification from a ‘friend’

Discord Steam community 50 dollar gift — Stage 2: $50 steam community gift! Looks legit. What could possibly go wrong!?

short url reverse lookup — Stage 3: Find out what can go wrong (the easy or the hard way!)

Consider reporting it too!

If you are like me, you won’t leave it there, you’ll maybe unfriend them and then notify Discord and report the hacked account. Something like this:

@[name], who was on my friends list, appears to have been hacked.

I received a message notification of a most generous (too good to be true) $50 steam gift card, claiming to link to steamcommunity.com

A glance at the actual link destination points to [tinyurl.com/2mrbds5u]

A reverse tinyurl lookup (using checkshorturl.com) resolves this to:

[… steamcommunirrty .com /174898988460] and flags it as a ‘Suspected phishing site’

I could be snarky and point out how obvious steamcommunirrty is as a fake site name and how to do it better, but I’m not giving these sewer clowns idea!