Twitch Streamer Scam link?

Update: More scammers on twitch today: Do not click or view anyone on twitch that is doing a "3B Gil Giveaway" Another sign is they will only let subscribers talk in their chat.


I was just on twitch and someone said they was doing a 3B Gil giveaway and it is their last stream on twitch.

They said they have their story posted on the offical forums but the link is shady. It has .com-lu.top only after you click the link it also take syou to a shady log in page with the one time token password on the same page.

I just want to warn those who watch the streams. It seems like a phising attempt to get username and passwords.

Take care and do not log in on that site.

On the launcher and lodestone at the very top in the sections.

https://na.finalfantasyxiv.com/lodes...ebacfe20eb364f

SE has posted about this on the Lodestone LINK as well as in the forums LINK. In fact, MTQCapture aka Mizzteq even posted a youtube video about it LINK. I've seen her, Arthars, and Mr Happy with fake streamers syaing they are quitting so be careful out there, if its sounds too good to be true, it probably is and don't forget to report the fakes!

Anything that is demanding your one time password and is not the official log-in client for the game should be an instant "nope".

I find it a little tragic how easily some people get baited by stuff like this. The only people who ever need your log-in credentials are SE and they never do giveaways of this nature.

Neato, I finally got to see one of these.

I feel like the comic sans should be an instant red flag. Kinda surprising that it looks like a real person streaming, I assume they stole someone else's video and made a fake version of their profile?

Also I got this when clicking their link:

https://i.imgur.com/KOwK0Hx.png

Although after clicking through it did look like a somewhat legitimate login page, so if people are engaging in unprotected internet maybe they might think they were just logged out and accidentally log in to the scam.

Some time ago, they'd been impersonating Larryzaur. It seems that they just record streams and re-upload that later.

Hi there. I know the stream in question. I've not watched XIV streams for very long, and didn't realise it was an impersonation of the actual legit person. I also generally watch certain types of stream with chat off, so didn't realise that either.
I didn't check the url after clicking the link. Definite naivety on my part, but I *immediately* changed my password after doing the, what I now realise is a fake 'log in'...

Is that enough you reckon, to make up for doing the major dumb? Again, definitely my fault, and my naivety on that one.... But yeah... Immediate password change to something very different in length and content, and the like... Or is the scam stronger than that and able to dig deeper?


EDIT:
I also changed pretty much everything in my account, like secret passwords, email addresses...
But: Would a phishing attempt like that have immediate and complete access to all your data upon confirming the passwords and stuff? Would it immediately have access to *all* the information?

I feel very stupid, never fell for something like this, but I was definitely not focusing or thinking.

Quote:

---

Originally Posted by BOWIEtheHERO

Hi there. I know the stream in question. I've not watched XIV streams for very long, and didn't realise it was an impersonation of the actual legit person. I also generally watch certain types of stream with chat off, so didn't realise that either.
I didn't check the url after clicking the link. Definite naivety on my part, but I *immediately* changed my password after doing the, what I now realise is a fake 'log in'...

Is that enough you reckon, to make up for doing the major dumb? Again, definitely my fault, and my naivety on that one.... But yeah... Immediate password change to something very different in length and content, and the like... Or is the scam stronger than that and able to dig deeper?


EDIT:
I also changed pretty much everything in my account, like secret passwords, email addresses...
But: Would a phishing attempt like that have immediate and complete access to all your data upon confirming the passwords and stuff? Would it immediately have access to *all* the information?

I feel very stupid, never fell for something like this, but I was definitely not focusing or thinking.

---

I'd run anti-malware and virus scans just to be safe. You never know, and all it costs you is a bit of time.

Quote:

---

Originally Posted by BOWIEtheHERO

Is that enough you reckon, to make up for doing the major dumb? Again, definitely my fault, and my naivety on that one.... But yeah... Immediate password change to something very different in length and content, and the like... Or is the scam stronger than that and able to dig deeper?

---

If you have any accounts elsewhere that share the same password, I would create new passwords for those as well. You never know if they'll attempt to use the password you typed in to access the account's email or use the email/password combo on other popular sites.

So everyone knows, The Bait to get you to click is the 3B Gil giveaway, there are a few more that just popped up on twitch and are live right now be warned its fake.