steam 'hack' doing the rounds at the moment

peterwalkley · 4 Aug 2021 at 10:29

Beware of people on your steam friends list asking you to vote for their CS:GO (or some other game) clan via a website. The site is set up to pretend to login via steam, but is actually stealing login details. A few people I know have been caught out.

Someone tried it on me from a hacked account and it was a fairly convincing chat conversation until I saw the site wanted me to login - at which point my scam alert triggered.

I gather its not a new scam, but hadn't seen it in person before.

Beerbaron · 4 Aug 2021 at 10:59

Enable Steam Guard two-factor authentication problem solved. Relying on a password for anything is so 2010.

NZXT30 · 4 Aug 2021 at 11:09

Yeah I had that convo and it was believable until the moment it asked me to log in with my steam account I just blocked and reported the profile as hacked.

A few days later I checked and my friend had his profile restored so I unblocked him.

Kronos · 4 Aug 2021 at 11:11

I was stupidly caught out by this one last year, doh.

Josh · 4 Aug 2021 at 11:11

Beerbaron said:
Enable Steam Guard two-factor authentication problem solved. Relying on a password for anything is so 2010.

This!

Fluffybob · 4 Aug 2021 at 11:15

Steam Guard sorted

deardevildude · 4 Aug 2021 at 11:49

I had one from someone on my Discord who got hacked with a similar scam. They sent a link that was something like "steancomunnitiycom.ru", the link was obvious but the little intergration thing Discord has (where is gives you a preview style thing of the link" looked like a genuine "Steam Community **PROFILE NAME**" thing on. That was made to look like it was to trade CS:GO skins.

I will update with a screenshot if I still have it.

Glad I look at links before clicking.

StrongSad · 4 Aug 2021 at 12:08

I only have 6 steam friends for a reason and one of those is my other account LOL

Matty8787 · 4 Aug 2021 at 13:09

I don't speak to anybody on steam so hopefully I am good.

BUDFORCE · 4 Aug 2021 at 15:53

StrongSad said:
I only have 6 steam friends for a reason and one of those is my other account LOL

Matty8787 said:
I don't speak to anybody on steam so hopefully I am good.

I do the same, and not just for steam, also just generally in life.

varkanoid · 4 Aug 2021 at 16:11

Matty8787 said:
I don't speak to anybody on steam so hopefully I am good.

Me Neither, there was a spate of hackers adding themselves to your friends list a few years ago before Steam Guard one even managed to break into my account via the friends list but I managed to block him out and since then I dont have a public profile and my friends list is closed off only have my brother and kids on it. That was a bit scary the somehow managed to add them to your friends list without you doing anything then managed to go to the forgot password links and get in that way. Luckily I had email security on at the time.

pestt · 4 Aug 2021 at 17:46

Beerbaron said:
Enable Steam Guard two-factor authentication problem solved. Relying on a password for anything is so 2010.

At least the 2FA on Steam actually works.
Every time I try to set it up on Ubisoft, the activation email arrives after 6 minutes. The valid activation has to be done within 4 minutes.. :rolleyes:

ic1male · 4 Aug 2021 at 19:05

pestt said:
At least the 2FA on Steam actually works.
Every time I try to set it up on Ubisoft, the activation email arrives after 6 minutes. The valid activation has to be done within 4 minutes..

You need to switch to an authenticator app, it's instant then.

Devious · 4 Aug 2021 at 19:30

Just curious, what do they do with hacked account? Play all your games?

agnes · 4 Aug 2021 at 19:49

Beerbaron said:
Enable Steam Guard two-factor authentication problem solved. Relying on a password for anything is so 2010.

This, I work for a industry leading CIAM SSO platform and it's scary how out of date a lot of systems are. The sooner we adopt MFA and go passwordless, the better. But people are scared and not educated enough on the subject.

deardevildude · 4 Aug 2021 at 20:49

Devious said:
Just curious, what do they do with hacked account? Play all your games?

Its not only that, think of how much money people spend on the games on their steam account and all the progression within the games (cloud enabled ones anyway) its quite a lot to lose when you think about it. Think of the money it would take to get all them games again, and there is a possibility some of the games you have arent on Steam anymore.

agnes · 4 Aug 2021 at 20:51

Devious said:
Just curious, what do they do with hacked account? Play all your games?

A lot, if not most accounts have cards added to them so they can data mine those numbers, not only that, but for example, my Amex card on my account doesn't even ask for the secure code anymore so someone could buy a tonne of games and gift them and sell them on key sites.

suenstar · 4 Aug 2021 at 21:02

I don't talk to anyone using Steam's chat, so I know if I get any messages on there it'll be either spam or a scammer.
Anyone I talk to on my friends list will usually message via Discord/WhatsApp.

Devious · 4 Aug 2021 at 21:43

agnes said:
A lot, if not most accounts have cards added to them so they can data mine those numbers, not only that, but for example, my Amex card on my account doesn't even ask for the secure code anymore so someone could buy a tonne of games and gift them and sell them on key sites.

Fair enough. I never use chat but i think i will set up 2FA.