The Steam Sale is hitting its peak and people are practically living on Steam – did you vote yet and get another card? Well, someone might be trying to get your cards, and more, and the phishing scam has gotten even easier to fall for.
Previously, the best that Phishers could do was work around the Steam Guard in a way that meant victims had to be gullible while still being PC savvy. The old version used fake Steam login pages that then asked users to find the Steam Guard SSFN file and send it through. The SSFN file is what your computer holds on the machine to verify your identity so that you don’t need to verify with Steam Guard every time that you login. Obviously, sending this to anyone is not a good idea, but now the scammers have gotten more clever.
The new scam uses fake profiles loaded with non-existent rare items from games as well as plenty of cards for trading – what a way to lure people in. From there, victims are directed to a fake Steam page so that they can trade. When they login, they receive the message:
Hello! We see you’re logging into Steam from a new browser or new computer.
As an added account security measure you’ll need to grant access to this browser by running the special tool (SteamGuard) we just sent to your computer.
To complete login you should click to open tool, then authentication is automatically completed.
We worry about your security and every time improve protection
Running the file which claims to be Steam Guard actually locates the Steam folder, grabs the SSFN file itself and uploads it to the phishing website. With that, the scammers can login as the victim, accessing whatever you normally access on Steam – this means double trouble for those who store their credit card on the system.
Phishing is always something to be careful for online, and these guys know how desperate we all are to get that Summer Sale badge. Don’t let your desperation to trade cards get the better of you – you still need to be smart about these things, and don’t let Steam Guard lull you into a false sense of security. Now, as long as we’re talking about trading, who has some Steam Summer Sale cards for me?
Last Updated: June 27, 2014
Kensei Seraph
June 27, 2014 at 14:34
Thanks for the heads up.
Alex Hicks
June 27, 2014 at 14:40
Thanks Zoe. Would never click on an external link to trade anyway. And I’m so bunk at that badge building hoohah that I just take any cards I get and immediately sell them at the lowest price on the market.
Almost have enough to actually buy a really cheap heavily discounted game.
Kensei Seraph
June 27, 2014 at 14:57
Same.
Although I use the money earned from selling cards to buy other cards for games I’m interested in.
Ottokie
June 27, 2014 at 14:47
Deleting Credit Card info after work…*tinfoil hat on
Anon A Mouse
June 27, 2014 at 15:01
I never have any Credit Card detail on the internet. Even if I pay with my credit card, I delete the info after the purchase again.
Kensei Seraph
June 27, 2014 at 15:11
Same.
I recently discovered that PSN had my card details from a few years ago so I immediately deleted it.
Weird thing is I don’t remember ever choosing a “Save card details” option at the time.
Anon A Mouse
June 27, 2014 at 15:15
Some sites don’t give you that option, they just save it as soon as you give them the info. That’s why I return to my accounts settings as soon as the payment has been done to ensure its not saved.
Rince&Shitity
June 27, 2014 at 14:48
If “We worry about your security and every time improve protection” doesn’t alert you to some Nigerian like scam you are doff.
Alien Emperor Trevor
June 27, 2014 at 14:56
You shut up. I’m going to receive my $143,000,000 from Mr Justice of the Nigerian Ministry of Finance any day now.
Rince&Shitity
June 27, 2014 at 14:56
See above 😉
Alien Emperor Trevor
June 27, 2014 at 14:53
All my cards are belong to me 😛
Rince&Shitity
June 27, 2014 at 14:55
You’re been selected by his Excellency Prince Pikeman the thirst. We’ve need your account number to give you his rightful millions to help us escape persecution by the Slovakians. Please to help you will get 5% of the 15 million dollars. We respectfully lend you request for help.
Alien Emperor Trevor
June 27, 2014 at 14:57
But which team are you on?
Kensei Seraph
June 27, 2014 at 14:57
He’s on the Red team.
Alien Emperor Trevor
June 27, 2014 at 14:57
That’s lacist.
Kensei Seraph
June 27, 2014 at 15:08
No, it’s Gingerist.
Sir Rants A Lot Llew. Jelly!!!
June 27, 2014 at 15:08
DING! Level up
Rince&Shitity
June 27, 2014 at 15:21
And for you, a level down!
Sir Rants A Lot Llew. Jelly!!!
June 27, 2014 at 15:27
You can’t level me down any further. I married a ginger. My level is untouchable 🙂
Cyberats
June 27, 2014 at 20:28
Ginger is closer to blonde, less visible “forest” hair…
Cyberats
June 27, 2014 at 20:27
Thank You Very Much, make check payable to ‘cash’ and send to this P.O.Box …..
Sir Rants A Lot Llew. Jelly!!!
June 27, 2014 at 15:05
yoh 0_0
Sir Rants A Lot Llew. Jelly!!!
June 27, 2014 at 15:06
This is why I don’t store my CC info ANYWHERE.
Rince&Shitity
June 27, 2014 at 15:07
What about on your card? 0-O
Sir Rants A Lot Llew. Jelly!!!
June 27, 2014 at 15:07
well that’s unavoidable
Rince&Shitity
June 27, 2014 at 15:21
I’ve got a friend who says otherwise! http://i.imgur.com/ENHPE.gif
Sir Rants A Lot Llew. Jelly!!!
June 27, 2014 at 15:27
Oof. ouch
Cyberats
June 27, 2014 at 20:29
Get a third friend and make a video of the new Three Stooges.
Jim Lenoir (Banana Jim)
June 27, 2014 at 15:07
lol, I’ve only traded with Master Chief Erwin, Bacchus and Pottie, because they mah homies! Bros for Life!
Mossel
June 27, 2014 at 15:55
I actually got that mail…thought to myself “Fuck no! I didn’t log in from another browser” and ignored it.
Cyberats
June 27, 2014 at 20:24
More reasons to get rid of Cloud Steamed Poop.
I will never buy a game that says Steam/Origin on it ever again.
Valve is no longer your friend. If it doesn’t install as a stand alone, you don’t want it.