Phishing/Scam

[fever 9,884]

Just got an invite to add someone, I'm trading so I added them. The following conversation took place.

14:47 - H[A]SKI: Hi bro

14:47 - H[A]SKI: my friend can't add you cause of steam error
14:47 - L-r | Fever: hey
14:47 - H[A]SKI: can you add him for discuss? he wants trade with you.
14:47 - L-r | Fever: ok
14:47 - H[A]SKI: http://steamncomnunlity.com/id/Soloerbern/
14:48 - L-r | Fever: I am reporting you for an attempted scam

Note the link looks similar to http://steamcommunity.com so if you were not careful you could click on it without thinking.

[+Dr. Obvious 14,606]

Bastards.

[Tsunami 1,204]

Idiots.

[Ruby 9,039]

Morons.

[point 2,268]

Edited December 18, 2013 by Hietha

[Reisen 1,973]

I always say: Pray for your butts that nobody finds out where you Scammers live. Because someday you might pull that shit on the wrong person, and you will lose your virginity to a stick with sand paper glued on it.

[LiNKs 416]

Ugh ever sense i got into unusual trading, this has been happening to me. Now I don't accept random friend requests.

[Nozy 48]

Wait, what?

[+JB. 4,800]

Something is wrong with the link? But I can't see anything. :C
help please

steamncommunity.com

Edited December 18, 2013 by Mister J

[James 279]

If I had a key for everytime I got this message I would have a burning TC D: I wish scammers would come up with more amusing techniques D:

[+JB. 4,800]

If I had a key for everytime I got this message I would have a burning TC D: I wish scammers would come up with more amusing techniques D:

I haven't told you before but my brother works at valve and he can unlock you all tf2 items and steam games. I just need your password.

totaly legit

[LiNKs 416]

I haven't told you before but my brother works at valve and he can unlock you all tf2 items and steam games. I just need your password.

totaly legit

OOMG REALLY? my username is duckcluck34 and my password is bubbasubbadop I want a burning EVERYTHING... Yea I have heard of that one before

[luop90 4,400]

The fake link happened to me once when I was selling my Orbiting fire hetmans headpiece. I grabbed the guys IP and steam ID before telling him I was reporting him as a scanner but about a second after the ip grab I was alerted through one of my auto IP lookups he was connecting through a strong VPN. One of the expensive AES encrypted ones. It is nearly impossible to crack one of those so I gave up at that. But his account had been like just made and he used the "my trading is bugged" bullshit to try and convince me to use the link. It was obviously just a throwaway account so I just left it at that. I love how they expect no phishing warnings to pop up since even the little windows firewall tells you that it's a bad page...

[Sari♥ 49]

Most of the time, the people that send you those links are hijacked accounts.

[Crystalitar 1,649]

Something is wrong with the link? But I can't see anything. :C

help please

 

steamncommunity.com

it was also a steamncomnunlity.com

[Chez-Box 3,240]

so, what's the rest of the scam?

[LiNKs 416]

so, what's the rest of the scam?

They make everything go buh-bye 

[luop90 4,400]

They make everything go buh-bye

No shit Sherlock.

[Ruigi 100]

Lel. Couple times happened to me.

[LiNKs 416]

Just happened to me. Sick and tired of it.

[Reisen 1,973]

Halten Sie Ihr Passwort geheim.
17:07 - inferno: hi
17:07 - inferno: could u add him?
17:07 - inferno: my friend wanna to trade with u
17:07 - inferno: could u add him?
17:07 - inferno: http://steamcomnrnunity.com/profiles/76234230430298409/
17:07 - inferno: http://steamcomnrnunity.com/profiles/76234230430298409/
17:07 - inferno: add him plz
17:07 - L-r | Elise: And if he had cancer, I wouldn't care either
17:07 - inferno ist Offline.
 

[LiNKs 416]

No shit Sherlock.

He was asking a legit question..No need to step in and be like that.

[Senor 280]

What happend when you click the link ? ;d I decided to check it out, and now im fucking worried that there is some shit which will steal my account ;d

[Ruby 9,039]

What happend when you click the link ? ;d I decided to check it out, and now im fucking worried that there is some shit which will steal my account ;d

Almost always, sites like that are a scam, not an actual hack, meaning they do not exploit security holes in your browser (I'm looking glaring at you, Chrome) in order to install a malicious piece of software which could gather your data. Instead, you can think of them as trojan horses - they are tricking you into thinking that you are on an actual Steam website, and that you need to log in. Once you enter your username and password they are sent to the developer of the malicious site, and the site itself redirects you to Steam homepage (or an actual Steam login page) to make you think you misclicked something. The sites can, depending on developers's skill, range from basic ones which just print out passwords to a file which the developer can later collect, over more complex ones, who try to mimic some Steam functionality, to the most advanced ones, who will even trigger SteamGuard so that you surrender your account completely (even though there are ways to bypass SteamGuard).

Mostly, the sites like that rely on psychological engineering, meaning that the developers actually spend more time making the site look convincing than on actual coding. Psychological engineering works spectacularily well in real life too - for example, if you were approached by a random man who wanted to check out what you are carrying in your bag, you wouldn't let them, but if they were wearing a suit, you'd be more likely to agree to a "search". Same principle applies here - if people are convinced enough that the site is legit, they won't have a problem trusting it with their passwords.

Of course, new malware is written every day and it's not out of the question that you might have picked up some sort of malware which would allow remote execution of code on your computer - unless you were downloading shady things, it's not likely.

Anyway, here are a few tips for staying safe from Steam phishing sites:

- keep your SteamGuard linked e-mail account as safe as possible (use two step authentication, have separate passwords)

- never enter your Steam password anywhere but the official Steam site

- always check the address bar when entering your passwords and try accessing the root of that site. Be wary of word plays like "stearnpowered", "steampowerd", "steam-powered", "steampowdered", "steamporewed" etc.

- if you pirate, pirate safe and from known trackers

- use ONE antivirus (I recommend Avast, it's free once you register at their site, for free too, and works wonders)

- tell people who tell you their friends have problems adding you to fuck themselves with a rake

Hope I helped

tldr - your account is as safe as it was before

[Minia 1,211]

Now, the advantages of using a bot... :3