Children are waiting for gifts from Supercell - and get an empty profile.
Children in mobile games are accustomed to waiting for free hema, skins and rare bonuses, and scammers have turned such a habit into a convenient scheme for stealing accounts. The F6 recorded phishing attacks on Brawl Stars, Clash of Clans and Clash Royale players: attackers counterfeit Supercell shares and lure the login data.
Analysts of the company have found at least nine active phishing domains associated with the theft of Supercell accounts. Among the resources found there is a Russian-language site that copies the official store of game developer.
Gaming studios regularly hold free promotions: distribute in-game currency, boosts and bonuses for the development of accounts without real purchases. Fraudsters use interest in gifts and publish in social networks announcements on behalf of fake Supercell Store accounts. The messages promise especially generous offers, and links lead to sites with addresses similar to real Supercell domains. The design of the pages is designed in the style of Brawl Stars, so that the player does not have suspicions.
After the transition, the phishing site asks to enter a unique game account ID. Then the player is offered to choose a prize: a special action, hema or skins. The next step, the attackers demand to pass verification through a fake form of a Google account and confirm the identity by phone number. After entering the data, the criminals get access to the Supercell account and can sell the stolen profile on a third-party site.
The F6 also found a similar shaping scheme of account aimed at Clash of Clans players. The mechanics is built on the same idea: the promise of free bonuses leads the user to a fake resource, where the victim takes data to access the game profile.ё
The F6 notes that the scheme is designed primarily for mobile players and a young audience of Brawl Stars and other popular games. Free distributions and large bonuses easily attract children to phishing sites, so it is important for users of any age to check the address of the page, do not enter data from the Google account on dubious resources and do not follow the links from advertising messages in social networks. Companies whose brands are copied by scammers have to separately track fake domains and block fake pages.
Children in mobile games are accustomed to waiting for free hema, skins and rare bonuses, and scammers have turned such a habit into a convenient scheme for stealing accounts. The F6 recorded phishing attacks on Brawl Stars, Clash of Clans and Clash Royale players: attackers counterfeit Supercell shares and lure the login data.
Analysts of the company have found at least nine active phishing domains associated with the theft of Supercell accounts. Among the resources found there is a Russian-language site that copies the official store of game developer.
Gaming studios regularly hold free promotions: distribute in-game currency, boosts and bonuses for the development of accounts without real purchases. Fraudsters use interest in gifts and publish in social networks announcements on behalf of fake Supercell Store accounts. The messages promise especially generous offers, and links lead to sites with addresses similar to real Supercell domains. The design of the pages is designed in the style of Brawl Stars, so that the player does not have suspicions.
After the transition, the phishing site asks to enter a unique game account ID. Then the player is offered to choose a prize: a special action, hema or skins. The next step, the attackers demand to pass verification through a fake form of a Google account and confirm the identity by phone number. After entering the data, the criminals get access to the Supercell account and can sell the stolen profile on a third-party site.
The F6 also found a similar shaping scheme of account aimed at Clash of Clans players. The mechanics is built on the same idea: the promise of free bonuses leads the user to a fake resource, where the victim takes data to access the game profile.ё
The F6 notes that the scheme is designed primarily for mobile players and a young audience of Brawl Stars and other popular games. Free distributions and large bonuses easily attract children to phishing sites, so it is important for users of any age to check the address of the page, do not enter data from the Google account on dubious resources and do not follow the links from advertising messages in social networks. Companies whose brands are copied by scammers have to separately track fake domains and block fake pages.
