Nitro is so popular that we are seeing malware distributed using the same Nitro as bait, as well as ransomware groups demanding Nitro gift codes in exchange for a working decryptor. Nitro as baitĭiscord Nitro is a paid membership plan for the popular VoIP and instant messaging platform that comes with perks like account customization, content uploads, and server boosts. This dual verification method ensures that there are no typos in the phishing process and that the stolen credentials are correct. When I try to log in, I get an error message saying “The account name or password you entered is incorrect” and I am prompted to log in again. The popup is actually a new window that opens on a phishing page, so once the Steam credentials are entered, they are sent directly to the hacker’s server. If you click on the “Get Nitro” button, you will see a fake Steam login form, which is almost identical to the legitimate form, but in fact this popup is a new window opened on a phishing page, so when you enter your Steam credentials, they are sent directly to the hacker’s server. The phishing message sent to Discord users said, “Nitro is free for a month, link to your Steam account to use it. This phishing scam is being perpetrated by a number of Discord accounts or automated bots controlled by the attackers, sending links that appear to be guides to other users to receive Discord Nitro for free. Hackers have been found to be using it to steal game items. A Steam phishing attack is occurring via Discord messages, where users link their Steam account and are issued a free Nitro subscription.

Discord nitro steam scams