A dangerous new version of phishing, called browser-in-the-browser, is dedicated to stealing Steam accounts from players playing multiplayer games.
if you are a fan of online tournament And this multiplayer gamebe very careful with this E-mail of Steam what you get some of them may rob you account Thief A new phishing technique called browser-in-the-browser.
According to the Group-IB Security website, they are theft bead Thousands of Games in Steam Players’ Library, whose value exceeds 300,000 euros. Cybercriminals send an email or message on behalf of Steam or a popular online tournament inviting the user to participate.
In other cases they use as a hook A free skin for lol, cs, dota 2, pubg, and other famous games. The matter is to take you to the “official” website of the tournament in question. This phishing attack takes advantage of the fact that More logins are done in a separate pop-up window, rather than within the browser. It is used by Steam, PayPal, and a lot more.
it’s called attack browser-in-browser Because the pop-up window that opens pretends to be a browser window, but is actually This is a malware that clones the browser without seeing it, You can see it in the previous screenshot.
It Looks Like a Browser Window, But It’s Actually an App malware independent. and being a program it can display whatever it wants, including A certified valve address with a padlock in greenAs shown in the box in red color.
The user thinks he is in a legit Steam login, because the certificate is telling him so, and he enters his keys. Cybercriminals steal them and quickly change keysto keep an account.
Then they start donating money or games to their own accounts, until the payment system stops working. And they keep accounts and games.
As we can see, this malware is very dangerous because it misses the usual phishing alarms, like the same URL, but different from the original, and lacks a security SSL certificate.
if you have a steam account with whom you play a lot multiplayer gameBe careful electric mail And material giveaways, or invitations to tournaments.
