logo

Fake Sites Stealing Steam Credentials

ID: 50302daa-3ec2-513c-a267-3cd825c8b920

STIX ID: report--50302daa-3ec2-513c-a267-3cd825c8b920

Feed Name: Zscaler Security Research Blog

Threat Score
60/100

Date Published: 2025-04-02

Date Updated: 2026-05-01

...
...

Zscaler ThreatLabZ documents an active phishing campaign impersonating CS:GO/Steam skin/trading sites that use convincing HTML-created fake browser login pop-ups and console-detection JavaScript to harvest Steam credentials; the report includes technical details, anti-analysis techniques, user mitigation advice, and a list of more than 200 malicious domains as IOCs.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.