Scammers have developed a new scheme for stealing money from online game users. The Russian Ministry of Internal Affairs warns about this, TASS reports. Attackers write to players in Telegram, introduce themselves as service administrators, and report the need to confirm their identity. The victim is sent a link and offered to contact them by phone or video call. During the call, scammers ask to turn on screen sharing and log into various applications, including banking ones. At this point, the victim receives SMS notifications with codes that the attackers use to withdraw money.
The Ministry of Internal Affairs urges people not to show banking applications and login details to strangers. Real administrators of gaming services do not request identity confirmation through third-party messengers and do not ask to turn on screen sharing.
The scheme exploits the gaming community's trust in the administration: online game users are used to receiving messages from support and responding to verification requests. Screen sharing is a relatively new attack vector: the victim themselves shows codes from SMS, not realizing what exactly is happening with the withdrawal at that moment.