Scammers have launched a large-scale campaign targeting Counter-Strike 2 (CS2) players by exploiting major tournaments like IEM Katowice 2025 and PGL Cluj-Napoca 2025. Cybercriminals pose as professional players, luring victims with fake giveaways of skins and cryptocurrency. Their goal is to steal Steam accounts and digital assets.
How the Scam Works
Researchers at Bitdefender Labs uncovered a scheme called "Streamjacking," where scammers create fake YouTube live streams. They impersonate well-known esports players like Oleksandr Kostyliev (s1mple), Nikola Kovač (NiKo), and Danil Teslenko (donk), promising valuable rewards to viewers.
To make the streams appear legitimate, scammers hijack existing YouTube accounts, rebranding them with the names, avatars, and descriptions of real esports players. These fake streams feature old match footage, which may deceive viewers unfamiliar with the original content.
Viewers are lured to phishing websites via QR codes or links, supposedly leading to giveaway entries. These websites request Steam login credentials to "claim" prizes, but instead, they steal victims' accounts — draining them of valuable skins, in-game items, and other assets.
Additionally, if victims send cryptocurrency under the false promise of receiving double in return, the funds are immediately transferred to scammer-controlled wallets with no chance of recovery.
Bitdefender also noted that scammers often mimic legitimate platforms like CS.MONEY or esports tournament sponsors to increase credibility.
How to Stay Safe
Security experts advise CS2 players to be cautious of any giveaways, especially those promoted through unofficial sources. Before entering personal information on external websites, users should verify whether they are associated with legitimate esports organizations.
Key security recommendations:
- Never send cryptocurrency expecting to receive more in return — these schemes are ALWAYS scams.
- Enable multi-factor authentication (MFA) and activate Steam Guard Mobile Authenticator to protect your account.
- Regularly check Steam login history for suspicious activity.
- Watch streams only from official YouTube channels of esports players you follow. If the same player appears to be "live" on multiple channels simultaneously, it’s a red flag.
- Be aware that even verified YouTube accounts can be hacked and used for fraudulent schemes.
This post is for informational purposes only and is not an ad or investment advice. Please do your own research making any decisions.
