Print

Please login or register.
1 Hour 1 Day 1 Week 1 Month Forever
Login with username, password and session length

[jvempire]

I already can't log in and I don't remember my Email linked to my account...

Well how many emails do you have?

[Gunner-Chan]

Anywhere from 5 to 10. I had a habit of forgeting about them.

[Ioric Kittencuddler]

So this is just another noob trap right?  I mean, you don't have to worry unless you do something exceptionally stupid like giving away your steam credentials even though Valve constantly says that they will never ask you for them right?

[beorn080]

From what I can tell by reading the thread, it emulates a log on screen and doesn't specifically ask for credentials. Kinda like spoofing a bank's webpage to get login data.

[Dr. Johbson]

So this is just another noob trap right?  I mean, you don't have to worry unless you do something exceptionally stupid like giving away your steam credentials even though Valve constantly says that they will never ask you for them right?

Anyone can make the mistake, thats pretty cold.

[xdarkcodex]

Wow there good. It looks so professional.

[Zangi]

Its surprising how noob traps get a lot of people.... it is tried and true on the internet.  It will never stop working.

[Cheeetar]

I was lucky by virtue of hardly ever getting people talk to me on steam. When somebody randomly added me and asked me to go to a site for free steam games, I just reported them.

[AussieGuy]

IS it possible to see what the website is as I just want to be prepared.

[Thexor]

Just a word for the wise: it's called "phishing", not "hacking". 


But yeah, Valve has a few issues with phishing on Steam. The problem is, there are legit links - http://steampowered.com/nvidia/ and http://steampowered.com/ati_offer1a/ are both legitimate, linked to by a sticky http://forums.steampowered.com/forums/showthread.php?t=851573 here in the Steam main forums (http://forums.steampowered.com/forums/forumdisplay.php?f=14). I've added the link trail to prove that I'm not phishing, possibly a fear when some random dude starts posting links in a thread about a phishing scam.

Problem is, since basically everybody has used official Steam websites for free stuff, it's a lot more likely that people will use phishing websites hoping for free stuff.




Oh, and since I don't see it linked here yet, the official Steam Support article for reclaiming accounts is https://support.steampowered.com/kb_article.php?s=97b04246c77b19f644cf77ffc399e721&ref=2347-QDFN-4366. Even if you don't have your e-mail, it's possible you'll be able to provide proof-of-purchase information and get your account back, both for retail and digital purchases.

Just a friendly reminder: report it quickly - apparently, hijacked accounts are quickly resold (at a fraction of the cost of the games on said account), and there's a decent chance the new owner will start using hacks. If your account is VAC-banned, there is absolutely nothing Steam can do. Even if your account is reclaimed, it'll be VAC-banned, because apparently it's an irreversible state. You'll be unable to ever play online again, unless you create a new account and re-purchase any online games.

[Itnetlolor]

Fortunately I'm rather paranoid as it is. I don't think I've been phished before through this method (at least via Steam), but at the same time, there is a chance that a mere visit (even accidental) can reveal your IP address, and through that, your account information can be retrieved somehow.

Always consider the absolute worst possible case scenario is all I can really advise.

[A_Fey_Dwarf]

I don't think they can take your details unless you actually input them into the log in thing. No need to be so paranoid.
Anyways took a screenshot of the phishing thing. I wouldn't worry about it now though as there are all kinds of alerts on this website.
Big image:

Spoiler (click to show/hide)

Edit: Gah photobucket scaled it down a bit, but still it looks quite authentic until you actually study the finer details.

Double edit: Also the website was along the lines of steamcommunity_com_viewprofile#12345 You can't really see the underscores in the steam browser and the fact it was sent from a hijacked steam friend account message with OMG WTF!? alongside it, it is pretty damn convincing unless you really pay attention.

[Tilla]

I don't think they can take your details unless you actually input them into the log in thing. No need to be so paranoid.
Anyways took a screenshot of the phishing thing. I wouldn't worry about it now though as there are all kinds of alerts on this website.
Big image:

Spoiler (click to show/hide)

Edit: Gah photobucket scaled it down a bit, but still it looks quite authentic until you actually study the finer details.

Unfortunately the forgery warnings only appear in good web browsers, and even then the option can be disabled (as it does have quite a few false-positive sites, such as reverse-engineering forums like PS3News being reported as phishing).

[Goron]

So this is just another noob trap right?  I mean, you don't have to worry unless you do something exceptionally stupid like giving away your steam credentials even though Valve constantly says that they will never ask you for them right?

Anyone can make the mistake, thats pretty cold.

It may be cold, but its true... And not anyone can make that mistake... Phishing requires the victim to willingly give away PI. As long as you don't ever willingly give your info to non-legit site or person you cannot be victimized (by phishing).

All I can say is why would you enter your login info on a page linked by a person

I'm gonna go on a wild guess and say that the phishing website was not hosted by steam, too.

So, if I sent a link to you with the url http://www.yourbanksurl.thisisnotyourbanksurl.com would you login?

and, for the love of god, don't use random forgettable email addresses for registration...

And, we can look at this in a good way, those that were victimized are now less likely to make the same mistake with something more serious (like a bank, or credit card)... assuming they have learned their lesson. In the end this experience will benefit them.

[Zangi]

*snip*
All I can say is why would you enter your login info on a page linked by a person

So, if I sent a link to you with the url http://www.yourbanksurl.thisisnotyourbanksurl.com would you login?

You'd be surprised at how common this is...  like when the person sending it is trusted...

OMG! You get $20 credit to your bank account when you log in!