Phishing ?
Mark the thread as a PSA and remind people to refresh their Steam API keys periodically or after they logged in on a dodgy website.
For the people that don't use it for the extensions on st and sg it's a massive red flag if one is just there without them registering it.
Comment has been collapsed.
Just happened to one of my friends, too. I've reported his account; not much more to do. :(
Comment has been collapsed.
Thanks for this warning. I just got a message from someone name justseedy asking me to vote on that esport4play site. I googled the site and got to this page, so I told him that I was on to him.
He didn't respond.
Comment has been collapsed.
Wait, come to think of it, how did his account get taken over? Isn't the steam mobile authenticator, like, you know, required for traders to not have ridiculous delays on trades? Unless they are only trading game keys and not actual steam trades I guess...
Comment has been collapsed.
Does not help against phishing scam, you enter you password and login info, then it asks you for 2fa like how steam would, then as you enter that they use that aswell against you, its scripted, happens in sec as you enter info.User that didnt catch that page is fake pretty much doesn't know that he is entering info in fake page, so you are giving whatever it is asking you to enter, 2fa codes too..etc
Comment has been collapsed.
I have new steam protocol - no fkn links from sites I dont know
That's kinda excessive. Rule of thumb is - you can login with steam anywhere, but never enter steam credentials on pop-ups from third-party sites. For example:
You've come to new site and it wants steam login? No problem! When you click "login with steam" it requires login and password? This is time to open steam in another tab and check if you're logged in. If yes - it's scam site. If now - login to steam on this new tab, that you opened yourself, then return to this unknown site and try to login again. It logs you in without password this time - site is legit, you just were logged off. Site still requires password - It's a scam.
Comment has been collapsed.
Had the exact same thing happen to me yesterday but I didn't know a nifty site like the whois, silly me should've gone with my first instinct...strangely enough, steam guard didn't tell me it "didnt like the site" as mentioned by OP. Oh well, lesson learned. So far, nothing happened that I could see...scanning pc now.
Edit: Thank you OP for making this thread, I was just about the recheck the site(because it felt sketchy at the time) when I saw your thread and things became clearer and aggregated with helpful info.
Comment has been collapsed.
I just saw this thread now, I'll update if I see you haven't had a breakthrough when I get their reply
Comment has been collapsed.
Many wonderful things about your Steam account:
https://help.steampowered.com/en/accountdata
https://help.steampowered.com/en/accountdata/SteamLoginHistory
https://help.steampowered.com/en/accountdata/ThirdPartyLogins
Comment has been collapsed.
I'm sorry it happened to "you".. but..
CS:GO.. Vote.. Will drop keys as thanks...Click.. Link... Login.. That's all...
How many warning signs do we need here?
You need to smarten up people. Things like this will never disappear.
BE the solution, and stop clicking url's you've never heard of.
Comment has been collapsed.
Helo! You don knew me but i have link you clik on. <link>
- Block
- Report account for harassment
- Profit
Comment has been collapsed.
Why would someone post the above on my Steam wall if his or her account was compromised? In fact, why would someone even contact me at all if they...
- have no SG account?
- have no public identity on Steam (profile hidden)?
- have no Steam history (nothing in SteamDB or other sites)?
- have no trading history?
- have no previous contact with me at all?
I have added people unknown to me when they have approached me using "the usual methods." I have also been bombarded by scam artists---utilizing various methods---for over fifteen years. Obvious scammer is obvious.
Comment has been collapsed.
I got an awfully similar chat from one of my contacts a few minutes ago, there was no link but I suspected it so I asked if this was a phishing scam and received a "sry what?" in response and then they went silent.
Should I pre-emptly block the user or would that be overreacting?
Comment has been collapsed.
Bump, the same scam is still circulating among the trader community I guess, had 2 people in my friend list between yesterday and today contact me with the same speech, posted to them on SG/ST to warn them and they have since regained their accounts.
Comment has been collapsed.
I got a new one from an old friend of mine (obviously been hacked).
"Hello! YOU WON AWP | Asiimov."
WARNING: DO NOT FOLLOW THE LINK IN THE IMAGE!
Comment has been collapsed.
From a high-level SG member. Be careful, guys
Comment has been collapsed.
Their account was hacked.
https://www.steamgifts.com/discussion/kV1Bn/jedi-training-group/search?page=5#b2hogJK
Comment has been collapsed.
EDITED
Account was hacked/phished, it was returned under control by changing password
screenshot of steam support request
https://imgur.com/a/uLvtttD
Contact Steam Support and tell them you believe you may have been phished.
Also, update your malware/virus scanner and reboot your machine. You may have a new key-logger installed on your computer.
Contact steam support asap. state that you're the user private email, name etc and if you have kept a receipt from previous steam purchase as well
Useful info and tips
quotes - main highlights from topic
you can check websites here - https://who.is
site was registered today - so yes, it's a scam
Notice how the fake in-page popup (the inner one with white decoration) is mimicking a chrome tab, which doesn't really look like my Firefox style (the outer one with dark theme).
The important thing here is noting it's not a real tab/window, just a fake form inside the same page.
For future reference: go directly to steamcommunity.com and login to your account, then go to whatever site you're trying to log into, if the site is still asking for your password you're being phished.
someone from my friendlist told me to do the same thing. i refused. was connected to my steam account already but this site asked me to connect again...
It's pretty common method of scam, just never click on any kind of links people send to you, as simple as that.
remind people to refresh their Steam API keys periodically or after they logged in on a dodgy website
OLD POST
got today message from someone I traded with, asked to vote for his team on site,
after some chat I tried to login on that site and Steam Guard didn't liked it, like some third party from another country was in the middle, dont remember something like that happening before, changed steam pass immediately after I understood thats something is wrong. for now everything is ok with my account, obviously I used not my main account and mail (but I still not ok loosing it)
after I asked of him whats going on (maybe too straightforward), he instead of asking me what happened deleted me from friends which only puts more fuel in fire of suspicions for me
he has 375 friend and tons of positive rep on steam trades, maybe I am overreacting but I decided to report him on steam in case his account was really hijacked and make this warning post
also from now on I have new steam protocol - no fkn links from sites I dont know
thanks forward for everyone with useful comments about situation
Screenshots on Imgur
Comment has been collapsed.