Select Page

Cyren Security Blog

The Cyren Security Blog is where Cyren engineers and thought leaders provide insights, research and analysis on a range of current cybersecurity topics.

Square Enix Phishing Campaign

by Joy Celine Faltado

From July 20 until August 16, 2021, Cyren observed a significant increase in the number of Square Enix phishing URLs. The campaign coincided with 14 days of free play announced by Square Enix on July 12, 2021.

During this period, we detected a total of 47,076 URLs for an average of about 1,700 per day. The attacks disappeared just as fast as they appeared. Between August 17 and September 1, we detected 1,105 Square Enix phishing URLs for an average of 70 per day.

The URLs were hosted across 20,730 unique domains. Most of the phishing URLs led to fake Square Enix account login pages.

Figure 1 – Square Enix phishing URLs

Figure 2 – Fake Square Enix login page

Other URLs directed users to forum pages promoting fake game giveaways or phony petitions protesting an alleged game change by Square Enix. These forum pages then tried to obtain login credentials or redirect a user to pages designed to download Potentially Unwanted Program (Adware) on their device.

Figure 3 – Fake giveaway luring users to a phishing page

These threads on Reddit and a Square Enix forum suggest this phishing campaign was also spread using the in-game chat feature, whisper. Attackers frequently use communication channels other than email to avoid/delay detection.

Targeted phishing attacks often follow press releases and major events like Amazon Prime Day and national holidays. The best thing users can do is slow down and closely review emails and links before clicking calls to action, entering information, or opening attachments.

You might also like

Phishing with QR codes

Don’t Scan or be Scammed By Maharlito Aquino, Kervin Alintanahin and Dexter To In 1994, a type of the matrix barcode known as the Quick Response code, now widely known as QR code, was invented by Masahiro Hara from a Japanese company Denso Wave. The purpose of the...