Phishing for Gamers: Fake Offers Invite Gamers to Test New Gaming Titles

Malwarebytes reports an active phishing campaign that poses as game beta test invites on Discord, email, and SMS; victims who download offered installers (NSIS/MSI) from Dropbox, Catbox or Discord CDN receive information-stealing malware (notably Nova, Ageo, and Hexon stealers) that harvests browser credentials, session cookies (Discord/Steam), and cryptocurrency wallet data. Attackers use compromised Discord accounts to increase credibility and propagate further phishing attacks, expanding the pool of compromised accounts and victims.