coverimage
1

What is The ‘Ultracup’ CS:GO Scam And How Can Users Avoid it

Aditya Singh Rawat
5/Oct/2020 12:50 pm

A new phishing scam called 'Ultracup' is running rampant within the CS:GO community.
User's receive a message on Steam requesting them to vote for their CS:GO team with a link redirecting them to the scam website.
The message is usually received from a dead account or that of a friend's which has already been hacked.

A new phishing scam called ‘Ultracup’ seems to be running rampant across the CS:GO community. Already a lot of users seem to have fallen for this scam as multiple discussion threads have popped up on both Reddit and Steam, with users actively warning others not to click on the following web address ‘www.ultracup.fun’.

Note: Please do not try to open the above web address as it is being reported as a potential scam website.


What Is The ‘Ultracup' Scam?

A lot of CS:GO users have reported receiving messages on Steam with a link asking them to visit ‘Ultracup.fun’ to vote for their CS:GO team. Upon clicking the link a website opens up which at first glance may look completely legit but it is actually a classic ‘Phishing Scam’.

The website is beautifully made giving a false pretense to many users that it might be a legit website but the facade falls away when the user clicks on ‘Sign in through Steam’. 

Classic phishing scamClassic phishing scamUpon clicking this a fake Steam login window pops up which is an exact replica of the original one, it looks very real and even the URL on this pop-up is legitimate. But taking another look at this windowed pop-up one will realize that it is not actually a separate window but has been rendered inside the same webpage itself. 
Fake Steam login embedFake Steam login embedThis can be tested by the users themselves by maximizing, minimizing, or even moving the pop-up window and noticing how it is a part of the same webpage. So, if a user actually tries to log in to the Steam account all they will be doing is giving away their account information to the scammers. Those who think the two-step verification process will protect them, in some cases the scammers were even able to bypass it successfully.

The scam was attempted on almost all the users via Steam message which they received from either dead or their friend’s accounts, asking them to click on the above mentioned link in order to vote for their CS:GO team. Though most of them were able to figure out what was going on a few have fallen for the scam.

RELATED:  CS:GO Pro Maikelele’s Steam Account Hacked Despite Steam Guard Being Enabled


How To Avoid It

The best way to avoid getting scammed is to not click on the link and visit the website obviously, but apart from this the user can also protect others by reporting the dead accounts from which they have received such a message.

Steam will be able to take action against such dead accounts once they are reported, preventing them from scamming other unaware users. Less the number of users who fall for this scam the better, as every hacked account repeats the same process of spamming the message to all of their friends and the same keeps on continuing over and over again.

Though the two-step verification has been bypassed in some cases it is for the best to keep it activated, reducing the chances of getting scammed even if your personal information gets out. If in case a user’s account has been compromised they can quickly do the following in order to regain control and flush the hacker out of their Steam account,

  • First and foremost the user should change their password.

  • Remove any Steam/CS:GO related browser extensions.

  • Deauthorize all devices from using the Steam account.

  • Check to see if any API keys were generated from the account if anything suspicious is observed then proceed to click on 'Revoke My Steam Web API Key'.

  • Reset your Steam trading URL so that the hacker is not able to spam you with trade offers.

Do keep an eye out for the ‘Ultracup’ scam which is on the rise as more users are falling for it, prevent getting scammed by following the above mentioned steps, share this information with other users to keep informed, and let’s try to keep the CS:GO community safe from such largescale scams.

RELATED:  Astralis Rifler es3tag Gets Scammed, Loses All His CS:GO Skins



Loading...
profilepic

Aditya Singh Rawattwitter_link

FOLLOW

Aditya Singh Rawat is the in-house CS:GO editor at AFK Gaming. While his understanding of the esports space is not restricted by geographical borders, his current focus lies in the Asian region. Understands and follows almost all major esport titles.