Cybercriminals are serving up the look-alike Steam login portal through phishing websites that pretend to offer free skins for the popular shooter.
Hackers are preying on Counter-Strike 2 players by using fake but convincing Steam login pages that trick unsuspecting gamers into entering their account IDs and passwords.
The hackers circulated the attack on websites that pretend to represent the esports team Navi, according to cybersecurity vendor Silent Push. The fake pages contain the slogan “play like Navi,” while offering visitors a “free case” or weapons skin they can use in the game. To receive the reward, the phishing page requires the user to log in to Steam.
That’s when the site displays a pop-up page that looks like the Steam login portal; it even includes the official “steamcommunity.
