A new phishing scam attempts to steal Steam login details and is specifically targeted at Counter-Strike 2 players. The BitB (browser-in-the-browser) attack presents users with a pop up promising free CS2 cases, seemingly with the endorsement of prominent Counter-Strike 2 team Natus Vincere (best known as Navi). The contents of the cases are revealed to the user, who is told that, in order to claim them, they must input their Steam details. Cyber security firm Silent Push, which discovered, investigated, and has now shared a report on the scam, says that these login details may then be sold on auction websites where buyers can bid on Steam accounts.
Posted from: this blog via Microsoft Power Automate.