14 DAY TRIAL // Security researchers have analyzed a number of scammy websites designed to target gamers. The cybercrooks are trying to trick unsuspecting users into helping them make a profit.
The Internet is flooded with all sorts of shady websites promising free games, beta keys, cracks, key generators and other gaming-related content. However, in most cases, users don’t get what they’re promised. Instead, they end up completing surveys, installing shady or malicious software, and handing over sensitive data.
Experts from Malwarebytes have analyzed a clever scheme targeting gamers. Scammers have set up websites advertising free copies of popular games. Those who want the “free games” are instructed to share a referral link with their friends in order to win points that can ultimately be used to gain access to the content.
When users search for beta keys to upcoming releases on Google, they’re presented with a number of shady websites. Some of them are linked to a site called the Steam Games Network.
The website has nothing to do with the real Steam, a fact that’s clearly mentioned in the Terms of Service section. However, since few users take the time to read this particular section of a website, they’ll probably think it’s the real deal.
The Steam Games Network advertises free keys for various games, including Dota 2, Call of Duty: Black Ops, Counter Strike Go, Rust, Dishonored, Assassin’s Creed 3, Anno 2070, Borderlands 2 and Command and Conquer 4.
A video hosted on the website shows users how to utilize the service to get referrals in order to gain access to the games. Those who decide to give it a shot are told to share the referral links with their friends. Once enough points are earned, users can acquire one of the gift cards, which have a certain value depending on how many people have clicked on the links.
However, the gift cards are not real. Gamers are told to complete a bunch of surveys and install potentially unwanted applications, but there’s nothing to download. When there is a download, it’s not the actual game or the promised keys, but another app that’s designed to lure victims to more surveys.
Experts advise users to avoid untrusted websites when downloading game-related content. To check if a website is legitimate, check out its Terms of Service, since this page usually reveals what the owners of the site are really up to.
“Scammers do this type of thing to cover themselves when angry users start calling lawyers,” Malwarebytes’ Adam Kujawa noted in a blog post.
“The general rule of thumb here is that if something appears too good to be true, it most likely is. Also, cyber criminals and scammers keep doing this stuff because it is effective, people fall for it and they get paid. The information you provide to the surveys is most likely being sold to advertisers and sketchy marketing firms, even added to e-mail lists that might be used for phishing purposes.”