Yes it's been happening for the past days, there's an exploit, and people can message you without being in same groups / friendlist / friends of friends friendlist.
Comment has been collapsed.
its weird. never used to get these - steam probably never even had this functionality, but every time valve pushes an update it seems to make things worse. Pretty bone-headed move on valves part to make this a function of the platform... not that they seem to give a shit any more.
Comment has been collapsed.
Hmm, didn't know this recently became a feature. Luckily, messaged from those malicious bots are usually really easy to recognize!
Comment has been collapsed.
I am, I just blocked them after reading what is inside
Comment has been collapsed.
I want to know one thing: All the users who're reporting getting suspicious messages from users, not in your friend list, are you all logged into any kind of Steam Group (most probably Public groups) Chat?
If you're then anybody can contact you through there, obtaining your chat head through the list of members logged into chat, whether they're online/offline that really doesn't matter.
For members of Closed Steam Groups, you should contact the group admins (with proof) immediately about weeding out the scammers.
Comment has been collapsed.
Not in any group chats and received no messages. In around 360 groups though.
Comment has been collapsed.
I also got 2 messages with this warning these last few days, I wonder how many more do we need to receive before valve does something about it...
The fact that there's a warning makes me think they already knew this could happen, or maybe the warning is meant only for messages from group members that aren't in our friend list and they didn't see this coming at all.
Comment has been collapsed.
Yeah, I got this as well. OFC the account had a picture of a pretty girl and the name was 'Kiley :3' but the name history also showed 'Alice :3'.
In my case, 'she' asked me for some kind of urgent help...
I mean, it's pretty obvious to me that these are fake accounts.
First of, the picture of a pretty girl combined with an overly girly name and these silly 'cute' emoticons or whatever and all of it on a private profile. The last one alone is enough for me to ignore a request or, if I judge it suspicious I just block it straight off.
Comment has been collapsed.
I agree it's pretty annoying as it does popup a sounded notification, and you know it's spam. Hope they fix this soon
Comment has been collapsed.
She's mine, stay away!
I was meaning to check but accidentally closed the message window when going to check her profile. But at least it was on YT so can't be anything that good. Shame Steam most likely blocks all tempting links like "Hey check my debute video on PornHub!", that would get many more clicks no doubt :P
Comment has been collapsed.
Valve seems to be taking their typically stance on these things,
I've disabled notification alerts for now to mitigate, but as long as you're in a bunch of public groups you're going to get a bunch everyday.
The fix for valve is easy, give an option to block messages from ppl not on our friends list. (Or at least put a level threshold on random message requests)
Comment has been collapsed.
Yeah, a lot of "go check this video" or "click on this link for 15$ wallet" and such...
Block all the way.
The new chat/friends stuff is shit anyway....
Comment has been collapsed.
The real crime is that internet explorer shortcut in your taskbar, though.
Jokes aside, got one too and it concerned me. Blocked it without reading but was worried it might have been something legit.
Surely steam will fix it like they did with the previous spambot rise a few years ago.
Comment has been collapsed.
Thats Microsoft Edge XD At least it ran better when I want to open Multiple Bars while multitasking on Steam and/or Bluestack without Chrome raping my RAM.
Steam will fix it but they need enough people spamming their Reddit and Suggestion Forum for this Concern of an exploit.
Comment has been collapsed.
192 Comments - Last post 44 minutes ago by kijono
50 Comments - Last post 1 hour ago by Fluffster
16,462 Comments - Last post 2 hours ago by eternalsadness
87 Comments - Last post 3 hours ago by ELGADO26
172 Comments - Last post 4 hours ago by DeliberateTaco
298 Comments - Last post 7 hours ago by RePlayBe
257 Comments - Last post 8 hours ago by hectocaster
93 Comments - Last post 35 minutes ago by RosimInc
281 Comments - Last post 41 minutes ago by callmeBG
822 Comments - Last post 1 hour ago by greengreen1
59 Comments - Last post 1 hour ago by Fluffster
95 Comments - Last post 1 hour ago by skadogg
10 Comments - Last post 1 hour ago by Devirk
2,606 Comments - Last post 2 hours ago by Gilgamash
In the Imgur Provided https://imgur.com/a/PwWLtNl
Has anyone encountered these type of random private messages recently?
I am not friends with these people and somehow they are able to send these Messages which baffles me that I've contacted Steam Support Yesterday awaiting their response.
I've blocked around 10 people by now and wonder how are they sending these private messages and why now of all times.
Was there a Steam breach? A Steam Update or something that allows you to Message people who aren't your friends?
Incase of a Duplicated Thread if someone made one, please direct me there so I can learn more.
Edit: This is now quite alarming.
Edit 2: Thx to a Developer who posted here, this is how the Scammers/Hackers are able to exploit sending messages
https://github.com/poespas/steam-force-chat
Update by Steam Support on these Intrusive Message of Scammers/Hackers using the Github exploit.
Hey there,
Thanks for reaching out to Steam Support.
To answer your question, there's a couple of different ways for a user to send you a chat message if they are not your friend. The most likely method, would be if you are in a group chat, any user that is also apart of the chat will have the ability to send you a private message. You'll be presented with the message you saw in your screenshot and have the ability to block them before actually seeing their message. I can really only encourage you to use your best judgement when receiving these messages from non-friends. If you'd like some information how to avoid scammers moving forward, check out our Trade Scams article.
To address the github script you mentioned, unfortunately Valve / Steam is not affiliated with the website in question. As such we have no way of removing content from their website.
Finally, I want you to know we absolutely value feedback from the Steam community, and I'm forwarding your comments on to the appropriate department.
Additionally, I would encourage you to share any opinions, suggestions, or ideas with the community as well, by posting on the Suggestions/Ideas section of the Steam Discussion forums.
This forum is regularly read by Valve's development team.
Please let me know if you have any other questions and I'll be happy to assist you.
Steam Support
Everyone, we must voice our concerns at the Steam Forums.
https://steamcommunity.com/discussions/forum/10/
The Valve Team must acknowledge this problem.
You can also go through Customer Support and Reddit.
Edit: 3 Seems many Groups have made Announcement of these Suspicious Messages going through around and their Admins has been kicking members and reported them to Valve and Steam Community.
Comment has been collapsed.