Steam Phishing Kit 8c89c4f

Steam phishing kit containing an image URL that only appears in phishing pages, additionally uses Discord Nitro as a lure.

References

IOK Rule (edit) 

title: Steam Phishing Kit 8c89c4f
description: |
  Steam phishing kit containing an image URL that only appears in phishing pages,
  additionally uses Discord Nitro as a lure.
  
references:
  - https://urlscan.io/search/#hash%3A8c89c4f3023d02b04197a30ca20f42ca7eb2634e1432ffff7b9d641a1f71a066
  
detection:

  image:
    html|contains: 'https://cdn.discordapp.com/attachments/818120722869911602/883999740071657542/nitro.png'
    
  condition: image
  
tags:
  - kit
  - target.steam