Discord users have been warned about a new scam that could see their account hijacked and used to make fraudulent purchases. The fraud, which security researchers at Malwarebytes first reported, tricks users into handing over their Discord Nitro subscription credentials. This is only the beginning, though – the scammers then use these credentials to steal your Steam account. This blog post will show you how to protect yourself from this scam.

What is Discord?

Discord is a popular gaming chat app that allows voice and text communication. It’s free to use, but there is also a paid subscription service called Discord Nitro. This gives users access to extra features, such as animated avatars and the ability to use custom emojis.

How Does the Scam Work?

The scam starts with a phishing email that pretends to be from Discord. The email tells the recipient that their account has been compromised and that they need to click a link to confirm their identity. The link takes the user to a fake Discord login page, where they are prompted to enter their Discord Nitro subscription credentials. Once the scammers have these credentials, they log in to the victim’s Steam account and make fraudulent purchases.

How Can I Protect Myself?

Install security tools on your devices.

This is one of the most important steps to protect your devices and information. A good security program will help block malicious websites, stop pop-ups, and remove malware if your device becomes infected. Guardio offers comprehensive internet security for all of your devices in one easy-to-use extension. It’s available for free on Chrome and Edge.

Scammers may use phishing websites and other fraud sites to obtain your personal information and access your device. These locations are often encountered when clicking on unknown links in emails, social media scams, pop-ups, and advertisements. ‌Guardio’s capabilities are developed in-house by the firm’s security team instead of relying only on blacklists. This helps detects phishing and malicious sites with greater accuracy. Hackers are skilled at disguising these locations to appear genuine, but Guardio debunks their deception even better.

Beware of phishing emails and links.

Phishing emails trick you into giving up your personal information or downloading malware. Be wary of any email that asks you to click a link or download an attachment, even if it looks like it’s from a trusted source. If you’re unsure whether an email is legitimate, you can hover over the sender’s name to see if the address matches the one that’s supposed to be sending the message. 

Keep your Discord Nitro subscription credentials safe.

The best way to protect your Discord Nitro subscription credentials is never to share them with anyone. If you think your account has been compromised, you can change your password on the Discord website. You should also enable Two-Factor Authentication (TFA) for an extra layer of security. TFA requires you to enter a code from your mobile device whenever you log in, so even if someone does manage to get your password, they won’t be able to access your account without the code.

By following these tips, you can protect yourself from the Discord Nitro scam and other scams that target Discord users. Stay safe out there!