security.riyo.me

Technical breakdowns of real-world social media scams and account takeovers.

Understand what the user sees, what happens behind the scenes, and which action actually prevents the compromise.

View latest threatsStart here I may be compromisedStart incident response Discord threatsScams, malware, and account theft

Latest analyses

Recently reviewed

Fake Free Nitro PowerShell ScamA lure that runs remote code and targets authenticated sessions and device dataDiscordCritical Steam Gift Card Fake Login ScamA gift-card lure that sends victims to a lookalike Steam sign-in pageDiscordHigh NSFW Server Invite Verification ScamAn invite lure that pushes victims through QR login or suspicious verificationDiscordCritical 2D/3D Art Commission Upfront Payment ScamA friendly DM that turns into a request for upfront art-commission paymentDiscordModerate Free Paid Application Malware ScamMalware disguised as a free copy of paid softwareDiscordCritical Fake Discord Support Report ScamA fake support report that pressures victims into changing their account emailDiscordCritical Paid Game Tester Malware ScamA fake game-testing job that delivers malware in a downloaded archiveDiscordCritical Discord Staff Impersonation ScamAn impersonation lure that asks for information, access, or account actionsDiscordHigh Overpayment Refund ScamA payment scam that asks the victim to send back a fake overpaymentDiscordModerate Fake Support Account Lock ScamA fake support warning that pushes users to a credential-harvesting pageX (Twitter)Planned Copyright Violation Phishing ScamA fake copyright warning designed to steal sign-in detailsInstagramPlanned Fake Verification Bot ScamA fake verification flow that requests dangerous permissionsDiscordPlanned

Browse by platform

Platforms

Discord9 published X (Twitter)0 published Instagram0 published

Browse by technique

Attack methods

PhishingImpersonated pages and messages that collect credentials.3 Token TheftTheft and reuse of an already authenticated session.2 OAuth AbuseAbuse of legitimate consent screens to gain excessive access.2 Malware DeliveryMalware disguised as a game, utility, update, or attachment.3 Fake Login PagesLookalike sign-in pages that capture authentication data.1 QR Code ScamsQR-based login or verification flows used to hijack sessions.1

Emergency actions

Respond quickly

I ran a suspicious commandAfter pasting a command into PowerShell, CMD, or a terminal I opened a suspicious fileAfter opening an exe, zip, scr, msi, or similar file I entered my passwordAfter entering credentials on a possibly fake page My account is sending DMsWhen your account is spreading messages without you I received a login alertAn alert from an unfamiliar device or location