CS:GO Mythic League phishing scam

[tony]

Hello. Recently i have been a victim of the "Mythic League" phishing scam.
A lot of my friends have been victims of it too, and i want to warn people about it.

What it does: One of your friends (or some random person) will dm you with automated messages. this is how an encounter plays out:

"Hi, are you busy atm?"

if you reply, it will respond with:

"Can you vote for my friend's CS:GO team?"

after you reply to that, it will then send you a link to the "Mythic League" website.

Here you can vote for fake ass teams and have your info stolen! What it does when you go to vote, is it asks you to log in with steam. it will redirect you to a FAKE community tab, that looks shockingly close to the real sign in page.

So you put in your account name and password, and BAM. Your account now belongs to those bastards.

You might not know it at first, but here's what happens:

Your account will start automatically blocking people.
It will send them automated messages.
The cycle will repeat until your entire friends list is phished.

Luckily, there are some ways to prevent this.

1: don't be like me, and don't go click links that someone, friend or not sends you mysteriously!
2:if you get redirected to the website, CLICK OFF IMMEDIATELY.
3: if you enter your info in the fake window, then there is still hope. QUICKLY change your password, and reset your email's password so they can't spam reset requests, AND so they can't spread it to your friends.




PLEASE stay safe, and don't give these bastards your info!

[cSg|mc-Hotsauce]

Old method of phishing.

[tony]

Originally posted by cSg|mc-Hotsauce:

Old method of phishing.

:summercat2023:

yeah, kinda feel retarded for getting phished lmao

[Overseer]

I've said it many times just like many others here:
Don't log into other sites with your account! Only use the Steam site - that you typed yourself - for the login. Once that account is logged in any legit website with the real Steam login will recognize your active session and only present a green button alongside your account name.
Any site that still asks for your login data and is unaware of your account name while your Steam account is logged in, is malicious!

That is the only thing that matters. The rest is just flavor.

[pineapplejuice]

If a random person ever dms you just tell them to kick rocks. Why would you even engage with them?

[tony]

Originally posted by Qubo Night Owl:

If a random person ever dms you just tell them to kick rocks. Why would you even engage with them?

Well, it wasn't a random person. It was a close friend.

[cSg|mc-Hotsauce]

Your friends account was hijacked first then, his account was used to send out more phishing links.

[SqueakyTweaky]

This thing is old as the Internet.

[Jbcisgood]

THANK FOR THE INFO

[<<---{!}--->>]

it's amazing how people still willingly follow phishing links and enter their login data. and it's not only you but many of your friends as well. you deserve each other :)

as already mentioned, never login in strange sites. have your steam logged in browser and if strange site can't see your login and asks again - close it immediately, it's not working properly or it tries to steal your data.
always check certificate for page you're about to login (someone can spoof your PC DNS records and replace steam site with fake one). steam have certs issued for Valve corp. these should be valid and connection has to be secured (https)

then, don't visit shady sites, don't follow links in chat, no one does that unless they're looking for trouble. keep your chat for texts only. that's old security rule for all social media and email - don't click on links. are you one of those people who never learn?

[tony]

nah bro i've learned, was just really tired that day lmfao

[Leplo]

Is the link victory mythic league all together? Asking because a friend asked me to vote for a team but he asked me in my native language so idk.

[Count_Dandyman]

Originally posted by Leplo:

Is the link victory mythic league all together? Asking because a friend asked me to vote for a team but he asked me in my native language so idk.

don't get distracted focusing on a single specific link for this scam they constantly make new links as each one gets identified and shut down or stops getting clicked.

look for the pattern of how the scam works which matches what your friend has done they will run the scams in multiple languages especially when they can identify the most trusted language of the target.

[J4MESOX4D]

Originally posted by Leplo:

Is the link victory mythic league all together? Asking because a friend asked me to vote for a team but he asked me in my native language so idk.

Doesn't matter what the site name is - this is a scam. Your friend's account is also hijacked. If you've given away your credentials then it's too late and you need to secure yours with the utmost urgency:-

1. Scan for malware. https://www.malwarebytes.com/
2. Check that the email and phone number on the Steam account are still yours.
3. Deauthorize all other devices. https://store.steampowered.com/twofactor/manage
4. Change passwords from a clean computer.
5. Generate new backup codes for your Mobile App. https://store.steampowered.com/twofactor/manage
6. Revoke the API key (there should be no key). https://steamcommunity.com/dev/apikey

Never login to any 3rd party site that any of your friends tell you to. Anything where you have to vote for something by logging in is a scam.

[Lilim]

Originally posted by Leplo:

Is the link victory mythic league all together? Asking because a friend asked me to vote for a team but he asked me in my native language so idk.

The link doesn't matter, it's always a scam.

Read more about it here: Vote for My Team (Scam)

[tony]

Originally posted by Leplo:

Is the link victory mythic league all together? Asking because a friend asked me to vote for a team but he asked me in my native language so idk.

yeah, something's def up here.