Call of Duty Mobile scam uses fake free points giveaway to hijack players' accounts
Security researchers have identified a phishing campaign targeting Call of Duty Mobile players by promising free in-game currency. The scam uses fake websites to steal login credentials and 2FA codes, potentially compromising linked gaming and payment accounts.
Why it matters
This highlights the ongoing threat of credential harvesting in the gaming industry, where high-value accounts are increasingly targeted by cybercriminals.
Call of Duty Mobile scam uses fake free points giveaway to hijack players’ accounts Call of Duty Mobile players should watch out for a phishing campaign disguised as a free Call of Duty Points giveaway, Malwarebytes researchers have warned.
Victims are asked to log in with their email address and password to claim free Call of Duty Points (CP), the game’s premium currency, before being redirected to a second page requesting their 2FA code.
“The site has no connection to Activision. Its only purpose is to steal the login details needed to take over accounts,” the researchers said.
Call of Duty Mobile has been downloaded an estimated 489 million times and generated around $1.8 billion in lifetime in-app purchases, according to Malwarebytes.
Get smarter about the news
Sign up free for a feed built around what you actually care about, Dive Deeper research on any story, and the full text of every article.
Create free accountAlready have an account? Sign in