Fake Pop-Up AdsĪs Malwarebytes Labs explained in the report, once a victim clicks on the button, the site appears to serve a Steam pop-up ad, but researchers explained the ad is still part of the same malicious site. The button initiates a fake pop-up window that appears to send targets off to Steam - but in fact, it keeps them on the same malicious page. There are several malicious domains associated with the spoofed page, analysts noted: The malicious link takes users to a spoofed Discord page with a button that reads, “Get Nitro.” “Just link your Steam account and enjoy,” the message says, and it includes a link purportedly to do just that.