"Outlined" article for easier reading: https://outline.com/TxVmHZ
Comment has been collapsed.
steamsafe.fun
Honestly, that url alone looks shady as hell :D
Fortunatelly, these scam attempts are usually super-easy to recognize. Unfrotunatelly, sometimes people see free games and kind of switch their brain off and hope for the best.
Comment has been collapsed.
Also if some friend send you the link, you might fall for it and check it out.. For me it would be obvious on some AAA game, but let's say you win Bad Rats or some other cheap indie game, even though it's a shady layout like dlh.net, you might try the next step to see if you can get it..
Comment has been collapsed.
let's say you win Bad Rats or some other cheap indie game, even though it's a shady layout like dlh.net, you might try the next step to see if you can get it.
You're probably right. I personally tend to back away as soon as a site asks me for a Steam login (hell, I wasn't even willing to link my Steam acc to SGtools for a long time), but I can see how others may be more trusting (or careless, in some cases).
And yeah, DLH does look kinda shady. If DLH asked me to login with Steam, I'd nope right out of there :D
Comment has been collapsed.
It does ask you to log in with Steam lol. But... a vigilant person reads the address bar to make sure that they are actually on steam. With those scam sites, it might look like a Steam login page, but the url gives it away. :)
Comment has been collapsed.
It does ask you to log in with Steam lol.
It does? I use a throwaway Facebook account for DLH and as far as I can recall, it never asked me to login with Steam.
And yep, the url is a good indicator in these cases :)
Comment has been collapsed.
Haha! Oh yes.
Now there is a "login with Paypal" on DLH. That's not a joke. ROFL!
Comment has been collapsed.
Haha, seriously? Login with PayPal lol, I wasn't even aware DLH sells something. I've always been there just for the giveaways :D
Comment has been collapsed.
I think they might have a store. I'm the same. I collect the odd giveaway if I don't already have it, but their site is too much of a mess to trust with anything more.
I've never seen a "login with paypal" before, so I laughed loudly when I saw it on DLH.
Comment has been collapsed.
I prefer to log in with my credit card credentials - its easy and safe
Comment has been collapsed.
Usually asking for a login through Steam is alright. But what sets off my alarm is asking for you to login through Steam just to see what the rest of the Steam key is. And for things mentioned elsewhere too, such as AAA games, big priced games etc.
Comment has been collapsed.
But it has safe in the url so it must be a safe website ;-)
Comment has been collapsed.
Exactly, always check if you are already logged in on official Steam site and login there if needed. If the other site is still asking you to actually insert username and password after that just don't do it and walk away.
Comment has been collapsed.
Only log in to steam(or any other account wherever) if you typed the url yourself. It's a good habit to have.
Comment has been collapsed.
It is just a normal scam site with roulette and if any site asks you to log in steam while you already are loged on Steam it is a scam.
Comment has been collapsed.
That's scary especially since I probably would have fell for the scam...
Comment has been collapsed.
The problem is that website doesn't explain that you can LOCK your account to prevent anything to be stolen.
Following the specific account recovery link at the bottom of the message you receive will lead you to another page than the usual one where you'll be able to test your password, tell that you cannot access to the email, then LOCK YOUR ACCOUNT so people cannot do anything anymore with your account, no trades, no messages, no anything.
I see a lot of messages warning for scams and explaining how to contact the support, but not how to LOCK the account, which, anyway, will leads you to contact the support right after to recover your account.
Remember that if anything of that sort happens to you, you can LOCK your account and prevent any transaction and message to be sent.
Comment has been collapsed.
For a second there I thought you meant that the scam site just gives you a key and it somehow steals your account when you try to activate it on Steam. Now THAT would have been an extremely concerning security leak.
Comment has been collapsed.
From this article:
https://prntscr.com/oupkkj
Just chek IP 188.119.12.154 - this is not Russia!
Why everyone want to see the "Russian trace"?
Comment has been collapsed.
Probably from the auto-email from Steam stating it was in Russia (RU). They used the data provided by Steam rather than trace it themselves.
https://www.bleepstatic.com/images/news/security/attacks/steam/free-game-code-scam/changed-email.jpg
Comment has been collapsed.
Agree... but: I believe that author of the article is obliged to verify info under he signs.
Comment has been collapsed.
Most of this can be avoided by logging into Steam first on Steam's website and using those credentials to log into other sites.
If a site is asking you for your credentials after you've already logged into Steam (even if their login page looks like a Steam login), stay away.
Comment has been collapsed.
sorry but who falls for that? you need to be desperate af to enter such a raffle
Comment has been collapsed.
Thousand of people still fall for the Nigerian prince scam to this day. Even when the phishing letter is literally using the Nigerian bank tale.
Comment has been collapsed.
+1, I think it's always important to raise awareness on these scams and frauds.. there are tons of them and many people keep on falling and having issues with their accounts and such..
Comment has been collapsed.
I'm pretty sure there's a term for this, what was it again?
Hmm... right. Natural selection.
Pardon my bluntness, but these kind of scams wouldn't be so successful if more people used some good old Common Sense™.
Sadly, some either lack it, or turn it off it once they smell profits. Or they just reuse the same password everywhere.
Comment has been collapsed.
Why click people on strange links, when it called "free" or any random messages?
Comment has been collapsed.
thanks for keeping everyone aware. just yesterday i got an event from one of my steam groups spamming one of these websites. if you didn't look hard enough, it'd be easy to fall for it. gotta stay on your toes.
Comment has been collapsed.
It's not about free games/items and not about clicking random links, and saying it only makes it worse (because next time it may be another fake reason, and people will fall for it again, because they are only warned about free games). It's nothing new, it's just a regular phishing, and all you need to remember to be safe - DON'T ENTER CREDENTIALS ON RANDOM SITES. And this was advised here many times, that if site wants you to login with steam - you first open new page, type in steam address yourself and enter credentials there, and if it shows you're logged in - then site is a scam. But no matter how many times we repeat it - people keep falling for this old and stupid scam (((
Comment has been collapsed.
Be wary if you won "free" games on websites like steamsafe.fun, gamekeys.gq, galcuon-gift.com and perhaps others. When you try to claim the key, it steals your account instead. Article: https://www.bleepingcomputer.com/news/security/steam-accounts-being-stolen-through-elaborate-free-game-scam/
Comment has been collapsed.