The attackers want you to enter your Steam account credentials on their site, which they'll hoover up. The page still changes to mimic the Steam third-party account link page, but it's built into the original phishing site rather than accessing the Steam service. However, a pop-up doesn't appear when you select the Get Nitro button on the phishing page. When you link your Steam account to third-party services, a pop-up window appears explaining what you're linking and that you should be aware of scams. Users are prompted to hit the 'Get Nitro' button to begin the link process. Discord Nitro Classic: Understanding the Differences If the target clicks the link contained in the phishing message, they're first taken to a website posing as an official Discord Nitro page, complete with a splash screen advertising the one-month free deal if you link your Steam account. As it usually costs $10 per month, it's a handy phishing lure against a wide range of targets.Ī bot or account controlled by a scammer sends an unsolicited direct message to the target along with a message claiming that 'If you link your Steam account, you'll receive one-month free Discord Nitro,' or words to similar effect. In short, the scam uses a free offer of Discord Nitro, Discord's premium subscription service that comes with a few extra bells and whistles, as a phishing lure. Discord Nitro Used as Phishing Lure for Steam Accounts
