Possible Phishing Scheme Using In-game Chat

[Kirika-]

I suppose the reason I initially posted this in tech support was because I wasn't sure what to do about it. I didn't want to use the RMT reporting function, since the message didn't advertise RMT, and I would have had to click the link to confirm anything. That's a hard nope. The last thing I need is to get hit with a ban or something for abusing the RMT reporting function. But if I just put it in general chat, I'm doubtful that it will generate any kind of official investigation into the account(s) which have been hijacked to send out the shady PMs.

Use the Report RMT function, as even though you received the message from the last person that received the message and fell for it, it is still the work of RMT scammers/hackers.
The investigation team will be able to figure out it was a victim's account being compromised, but that will also be part of the account owners account recover process.

[Trug]

Use the Report RMT function, as even though you received the message from the last person that received the message and fell for it, it is still the work of RMT scammers/hackers.
The investigation team will be able to figure out it was a victim's account being compromised, but that will also be part of the account owners account recover process.

That makes sense, will do from now on. Thanks!

[Nulien]

Yeah, these are getting more and more frequent. I'm getting at least one a day now, so people are definitely falling for it. Might be time for SE to put up a warning in the login message for a while, I think?

edit: I went to the link the first time I got one of these, and it really does look like a legit login screen... if I'd been paying any less attention, I might've fallen for it myself. Instead, I just entered the username Really? and the password nicetrydips**t, and then went and changed my actual password just in case anyway.

[KageTokage]

Hopefully reporting the domain to Google Safe Searching enough will eventually get them to flag it and any similarly named off-shoots as malicious.

[Seraphor]

i dont care if it make anything of twitch, just don't want to deal with all kind of fake live stream on that channel

...fake live stream?

Hopefully reporting the domain to Google Safe Searching enough will eventually get them to flag it and any similarly named off-shoots as malicious.

I think that .xyz domain is just a web hosting service. They'd end up flagging thousands of legitimate sites if they did that.


Also I wouldn't namedrop the people you send you tells, and blur their names in screenshots. They're not scammers, they're victims who have had their accounts compromised.