Fake verification pages are stealing Steam accounts from players

A widespread phishing campaign impersonates FACEIT with polished fake pages and lookalike domains to trick CS2 players into submitting Steam credentials via a Browser-in-the-Browser fake login; stolen accounts and Steam Guard codes enable theft of games, skins, wallet funds, and resale on criminal marketplaces. The report details distribution vectors, example domains, social-engineering cues (blurry QR codes, urgency), and recommended protections such as verifying the real browser address bar, using official sites/apps, enabling Steam Guard, and changing reused passwords.