Browse
Category
DiscussionsBugs / Suggestions

I think ClemmyGames is stealing people steam log-in information but maybe im wrong

Closed
salmase

Well my steam account was recently hacked (Good luck i have the steam authenticator on the phone and i was fast to change my password).
For the timing of things i can only think that i was hacked because i entered a shoddy link to join a steam group on a giveaway. The
person doing this giveaways is https://www.steamgifts.com/user/ClemmyGames and in the description of the giveaways you have a link to Join the group at: https://steampowered.com/groups/ClemmyGames and your account seems to be loged out and you need to log-in to join the group. Also a link for a group needs to be https://steamcommunity.com/groups/(nameofthegroup).

Here some of the giveaways https://www.steamgifts.com/giveaway/WbYNZ/lannath , https://www.steamgifts.com/giveaway/8ylNX/there-will-be-ink , https://www.steamgifts.com/giveaway/jDQlk/tiltit , https://www.steamgifts.com/giveaway/0Tma7/supesu-2.

Here some pictures
https://imgur.com/a/v558MeN

I dont know what to do but make a post on the site to alert people about this. If some MOD of steamgift wants to do something or people have some good advice write down something on the comments

5 years ago

Comment has been collapsed.

17 Comments
Georgeous

looks scammy to me, it seems pretty weird and most of the link won' work after refreshing or doing something else.

I believe there is no such thing as steampowered/groups

5 years ago*
Permalink

Comment has been collapsed.
misterhaan

i tried it with a group i belong to and it works. usually groups use steamcommunity, but i guess valve shows it either domain.

5 years ago
Permalink

Comment has been collapsed.
MouseWithBeer
  1. not a bug or a suggestion
  2. calling people out is against the rules

Message support directly instead (not sure if anything can be done, but who knows).

5 years ago
Permalink

Comment has been collapsed.
Rudokhvist

not sure if anything can be done, but who knows

At least this user can be banned from SG.

5 years ago
Permalink

Comment has been collapsed.
salmase
  1. I didn't know in what of all the categories this topic was meant to be.
  2. i didn't know that either.
    Im gonna send a message to support. I was expecting Clemmygames to be banned
5 years ago
Permalink

Comment has been collapsed.
FateOfOne
(Senior Moderator)

Hello salmase, thank you for submitting a ticket we will look into the issue. I need you to please edit the thread and close it as it is calling out and against SG rules. When something like this occurs in the future please make sure to only submit a ticket to our team.

5 years ago
Permalink

Comment has been collapsed.
nhahtdh

It's good that you are alert, but fortunately, the site is safe to log in, since it also belongs to Valve, just using a different domain so your cookies from steamcommunity doesn't work.

5 years ago*
Permalink

Comment has been collapsed.
Rudokhvist

This is some really serious shit. I think this information should not only be sent to SG support via ticket, but also to steam support and letsencrypt.org support.

5 years ago
Permalink

Comment has been collapsed.

Deleted

This comment was deleted 5 years ago.

5 years ago
Permalink

Comment has been collapsed.
salmase

steampowered.com/groups/steamgifts this dont work im kicked to main page

5 years ago
Permalink

Comment has been collapsed.

Deleted

This comment was deleted 5 years ago.

5 years ago
Permalink

Comment has been collapsed.
salmase

that worked

5 years ago
Permalink

Comment has been collapsed.
Rudokhvist

But problem is - this website is NOT on steam. And I don't really understand how he did it, and I'm very concerned about it.

5 years ago
Permalink

Comment has been collapsed.

Deleted

This comment was deleted 5 years ago.

5 years ago
Permalink

Comment has been collapsed.
madsession

What are you talking about not steam?

I just hacked your profile. https://steampowered.com/id/ryzhehvost/ call me MR haxxor and do my bidding.

5 years ago
Permalink

Comment has been collapsed.

Deleted

This comment was deleted 5 years ago.

5 years ago
Permalink

Comment has been collapsed.
AllTracTurbo

That is interesting. I clicked on a bunch of Steam group pages and it keeps me logged in. When i click on the one that you provided I am not logged in.

The ones where I am logged in say the certificate is issues to store.steampowered.com from DigiCert and it says Valve Corp US next to the URL.

The one where I am not logged in says it is issued to steamcommunity.com from Lets Encrypt Authority and doesn't say anything next to the URL.

If I go to any other community page from Steam, it still shows Valve Corp US next to the URL and has the first certificate from DigiCert from store.steampowered.com

I don't know anything about certificates, but it is interesting.


Edit: Group URLs are usually steamcommunity.com. When you go to the same group with the URL steampowered.com, you will be logged out and you will get the 2nd certificate from Let's Encrypt Authority.

I don't think anything shady is going on here, it is just a different link. Here is the normal link: https://steamcommunity.com/groups/ClemmyGames

5 years ago*
Permalink

Comment has been collapsed.

Closed 5 years ago by salmase.