HQ/EMEAFind out how we can help your business
A newly discovered campaign using fake CS2 tournaments, such as IEM Katowice 2025 and PGL Cluj-Napoca 2025, on various platforms can lead to a scam operation.
Reports revealed that the threat actors offer the Counter-Strike 2 streaming service to scam gamers and steal Steam accounts and cryptocurrency.
Researchers stated that they discovered a fraudulent “streamjacking” effort that targeted the gaming community by impersonating popular CS2 esports athletes. These threat actors impersonate professional CS2 players like s1mple, NiKo, and donk during live streams on YouTube, allowing them to promote bogus CS2 skins and Bitcoin prizes.
Moreover, these scammers promote these streams through stolen legal YouTube accounts, which they rename as needed to imitate professional athletes. These live streams include loops of past gameplay footage, which appear live to anyone who has not seen them.
The fake CS2 tournaments on streaming platforms use QR codes or URLs that could redirect users to malicious sites.
According to investigations, the fake CS2 tournaments on different streaming platforms leverage QR codes or URLs to redirect viewers to fraudulent websites.
Once they arrive on the site, they will be prompted to check in with their Steam account to collect their presents or contribute cryptocurrency to earn double in return. Once logged in, victims inadvertently give scammers access, allowing them to take expensive skins and other valuable in-game items.
Furthermore, the researchers noted that all cryptocurrencies sent are promptly transferred to attacker-controlled crypto wallets. These frauds frequently exploit legitimate platform names such as CS.MONEY or esports sponsorships to strengthen the deceit.
Hence, gamers should be careful of scams that proliferate on YouTube and other platforms. It is also advisable to double-check alleged links with official esports organisations before entering important website information.
Offers that are too good to be true, like promises to double or triple cryptocurrency assets by first sending some, are always fraudulent, with no exceptions.
To keep Steam accounts secure, all users should enable MFA and Steam Guard Mobile Authenticator and constantly monitor login behaviour for suspicious sign-ins. Lastly, only view videos from official pro player accounts and be wary of seeing the same players live-streaming on other, even similarly named, channels to avoid getting promotions that could lead to malicious websites.
