!!Steam Phishing Warning!!

[Rickster]

So this one steam friend got hacked a few hours back, basically they ask you to trade with their friend and ask you to follow a link, that link asks for your username and password and sends it to the hacker then he will Hi-Jack your account.


This is the message the hacker sent me: "Hello. My friend want to trade with you , but he have friend add limit.
Add him please!
steamcommunrity.com/profiles/76561198048724920/"


So how do you add someone who has reached the limit? That was suspicious.

I later followed that link and it brought me to this website, DO NOT ENTER YOU DETAILS ON THIS SITE!:

It looks pretty legit doesnt it? Untill I looked in the URL, no SSL Valve US Verification, now lets look at the real steam login website:

Also, when you visit the fake one, a download for SteamGuard.exe starts, I stopped the download and will download it on a VM just to see what it is.

 

[Electric]

Dude, this alone would have given it away to me right from the start.

steamcommunrity.com

 

[Rickster]

Dude, this alone would have given it away to me right from the start.

steamcommunrity.com

TBH, I didnt even notice that.

 

[Rickster]

It opens up a command prompt of some sort, its way too fast to read.

 

[Chevron]

Dude, this alone would have given it away to me right from the start.

steamcommunrity.com

+1

No need to look at that other crap. URL gives it away immediately.

 

[killerbyte]

Your friend is an idiot. Seriously, how do you not notice the URL is dodge. Plus this sort of phishing is old.

 

[Segg]

1) URL is dodge
2) Hello. My friend want to trade with you , but he have friend add limit. Poor sentence structure

Ask your friend what was going through his mind at the time :erm:

 

[-Misfit-]

It's pretty sad that people still fall for these obvious scam attempts.

Tell your friend to contact Steam Support.

 

[saguran]

Shame, did he lose his account completely now?

 

[Rickster]

2) Hello. My friend want to trade with you , but he have friend add limit. Poor sentence structure

To be fair he is Afrikaans.

Shame, did he lose his account completely now?

No he got it back shortly, but the hacker did steal all of his items for CS:GO

 

[Bryn]

Dude, this alone would have given it away to me right from the start.

steamcommunrity.com

+1

/thread

 

[TJ99]

If you can't spot that fake link or the textbook Nigerian English, you deserve to be scammed.

 

[Electric]

To be fair he is Afrikaans.



No he got it back shortly, but the hacker did steal all of his items for CS:GO

Ouch

That can be worth crap loads or 50c.
I'm thinking it was worth a fair bit.
I'd be uber pissed if my CS:GO items were stolen.

 

[slvR]

These are just bots that phish and steal account items, they're everywhere, just block anyone that adds you that you don't know, or have a comment before adding policy for people to add you.

Also, check the account out first, it usually only has free to play games and looks like it was just made, sometimes they don't even have a profile setup.

Keep safe and yea