PhishingPublished 24 Jun 2026

From 3 Domains to 75 · Pivoting Through the FACEIT/Steam Phishing Kit

Source Reddit ThreatIntel

Discussion

This threat involves a phishing campaign leveraging a kit targeting FACEIT and Steam users. The campaign expanded from initially using 3 domains to 75 domains, indicating a significant scaling of the phishing infrastructure. The information is sourced from a Reddit post linking to an external blog analysis. No specific affected software versions or exploits in the wild are reported. The campaign is categorized as medium severity based on available details.

r/threatintel (opens in a new tab)u/Aarondapastyman0 points0 comments

https://intel.webamon.com/blog/faceit-steam-phishing-xaoriwindow

Links cited in the discussion

https://intel.webamon.com/blog/faceit-steam-phishing-xaoriwindow

Impact

The primary impact is the risk of credential theft or account compromise for users of FACEIT and Steam platforms due to phishing. No direct software or system compromise is indicated. The expansion of domains may increase the likelihood of users encountering phishing sites, potentially leading to increased account takeovers or fraud.

Defensive guidance

No official patches or fixes are applicable since this is a phishing campaign rather than a software vulnerability. Users should be advised to remain vigilant against phishing attempts, verify URLs carefully, and use multi-factor authentication on their FACEIT and Steam accounts. Security teams should monitor for related phishing domains and educate users accordingly.

Summary

The phishing campaign uses a kit designed to impersonate FACEIT and Steam services to deceive users. The infrastructure supporting the campaign has rapidly expanded from 3 to 75 domains, suggesting an attempt to increase reach and evade detection. The source of this information is a Reddit post referencing an external blog, with minimal discussion and no direct technical indicators provided. There is no evidence of direct exploitation of software vulnerabilities or patches related to this threat.

References

Community reviews

Loading reviews…

Discussion

Links cited in the discussion

AI analysisMachine-generated, updated 25 Jun 2026, 01:01 UTC

Technical details

References

Community reviews

Related threats