Don't click any links from Steam messages, even from your friends - they can be hacked as well. It's a big problem and many blogs wrote about it. Also, if you trade using 3rd party marketplaces, make sure it's good. I use DMarket most of the time, for example...