TLDR InfoSec · ATTACKS & VULNERABILITIES
FAKE CS2 TOURNAMENT STREAMS USED TO STEAL CRYPTO, STEAM ACCOUNTS
Summary from the TLDR InfoSec newsletter
Threat actors have been abusing major Counter Strike 2 tournaments to steal Steam accounts and crypto via stream jacking. They are impersonating professional CS2 players on live streams and promoting fake skin and cryptocurrency giveaways. The attackers use hacked YouTube accounts with looped footage of past streams to trick viewers to scan QR codes or send them crypto.