“Just link your Steam account and enjoy,” the message says, and it includes a link purportedly to do just that. Researchers at Malwarebytes Labs released a report detailing the new Discord Nitro tactic, explaining that the target is first served a malicious direct message on Discord with the fake offer:
But researchers flagged a new approach as noteworthy because it crosses over between Discord and the Stream gaming platform, with crooks offering a purported free subscription to Nitro (a Discord add-on that enables avatars, custom emoji, profile badges, bigger uploads, server boosts and so on), in exchange for “linking” the two accounts. Gamer-aimed Discord scams are just about everywhere. There’s a new scam making the rounds on Discord, through which cybercriminals can harvest Steam account information and make off with any value it contains.
