There is a new online scam, where cyber criminals trick people into downloading harmful software under the pretext of beta testing a game. This campaign targets people on platforms such as Discord, email, and even text messages, aiming at stealing personal information and compromising accounts online.
How does this work?
The scam starts by sending a harmless message. In this case, a user on Discord or elsewhere receives a direct message from a purported game developer claiming to have sent them a new game to play. The user is asked whether they would want to try the supposed game. In most cases, these messages come from compromised accounts, so the request seems all the more real.
If the victim consents, the attacker shares a download link and password to the target so that they can actually access and start downloading the game file. These links are usually Dropbox or even Discord’s network because most malware authors upload their creations to an existing, popular platform. But what users download aren’t games-these are referred to as information stealers.
What Do These Malware Applications Do?
Once installed, these programs, such as Nova Stealer, Ageo Stealer, or Hexon Stealer, begin extracting sensitive data. This may include:
1. Saved browser passwords
2. Session cookies for services like Discord or Steam
[…]
Content was cut in order to protect the source.Please visit the source for the rest of the article.