➀ Scammers are impersonating developers of the game 'Sand' to send fake playtest invites, aiming to steal Steam login credentials.
➁ These fraudulent invitations lead to phishing sites mimicking official Steam pages.
➂ Developers confirm no active playtest exists and advise ignoring and reporting such messages.
➀ Phishing attacks are on the rise, with over 800,000 victims in the first quarter of 2024;
➁ Astaroth malware bypasses 2FA restrictions to gain access to Gmail, Outlook, or Yahoo accounts;
➂ The malware intercepts requests, captures session cookies, and uses reverse proxy techniques to steal credentials.
YouTube has issued a warning to users to be cautious after investigating an account hijacking campaign. The campaign involved fraudulent emails appearing to come from YouTube, directing users to malicious links. The company advises users to slow down, spot check details, and not to provide payment or personal information.
