TLDR InfoSec · ATTACKS & VULNERABILITIES

FAKE CS2 TOURNAMENT STREAMS USED TO STEAL CRYPTO, STEAM ACCOUNTS

bleepingcomputer.com2 min read

Summary from the TLDR InfoSec newsletter

Threat actors have been abusing major Counter Strike 2 tournaments to steal Steam accounts and crypto via stream jacking. They are impersonating professional CS2 players on live streams and promoting fake skin and cryptocurrency giveaways. The attackers use hacked YouTube accounts with looped footage of past streams to trick viewers to scan QR codes or send them crypto.