This actually happened to me today. Except he added me and we "couldn't trade"
Two people on my friends list; both of whom are VERY active traders on here, got hit today. Be careful. I clicked one of the links and changed my details.
If you get these links from a friend, they've almost certainly been compromised. Be sure to let them know if you know them off of Steam at all. They may not even be aware yet.
It opens up a page that looks like any steam profile. What happens is someone goes to add the person like the msg asks, and they log in and thats how they get your info. Just visiting the page won't hurt. Logging in is what hurts.
And yeah, Chrome gave me a phishing warning earlier and now cant even access it, so it looks like its getting nipped in the bud. No telling how many people have already been hit. I know of at least 5, 2 on my list, the 2 in the OPs post, and another Steam friend has a friend of his that got hit.
Just happened to me few minutes ago while I was playing, didnt click but copied&pasted on my browser and realized the link wasn't right, didn't add the guy and closed.
Whomever the msg came from has been hijacked. Let them know if you know them off Steam.
He already know, someone wrote on his profile and changed his account name warning he's been hijacked.
If your talking about me, I changed my name, I DID, i wanted to add in don't click the link but it wouldn't fit so I put it in my description.
Yeah, that's what I said, you changed your name to warn other people. Sorry for deleting you from my friend list, I panicked :(
It's fine, I wouldn't have done the same as you though as I first got the link from someone else and was dumb enough to not notice there was an I before s and I'm still friends with that guy, because I know he didn't know that would happen either
I got hit.
And here is the full story:
I've got that pm form a person on my friend list. I wasn't really looking on the url and just clicked away.
I clicked add a friend, and after that it asked me to log in. I entered my user name and pass. After that I've got a prompt from steam guard asking me to enter that code. Got the code on email. That was a bit strange to me but steam guard has glitched on me few times, so I've entered the code that arrived on my email. After that the site just returned me to main steam page.
In 2 mins I've got email from steam that my email has successfully been changed. Then I was petrified...
Ive gone to report that my account has been hijacked, when i've noticed that my steam got sign off. I tried to sign in again but it kept failing. I tried to retrieve account but the mail never arrived (the mail address was changed). I've made a report to Steam Support.
Then I've noticed that I'm still signed in on the web browser. I've seen first hand how the guy traded all my stuff to some other accounts. All of them were from Russia. I've taken screenshots of trade history and how he is emptying my account. Sent all of that to Steam Support. After the account was empty (he traded around 400 of my tf2 keys, 40 dota 2 keys, and around 100 games from my inventory), he started spamming people in my friends list with that malicious link. I've tried to warn as many of them as I could that they should not click on any links they get from me, and that they should report Hijack. I got confirmation that my account "infected" at least one other from my friends list.
Emptying the account took around 1h. And sending the malicious messages started after that.
I just hope Valve and Steam Support will help me first get my account back, and maybe some of my inventory stuff.
I know that I've got myself to blame for being so stupid. I practically gave this guy my account on a silver plate.
It's been really stressful night for me. I would like to thank a lot of users who helped in reporting my account and writing on my page to warn others. I dont want to "infect" anyone else. I couldn't look at my account like that any more so I've closed the web chat, ending all "control" I had left of my account.
Be safe people and dont be stupid like me. :(
info from steamguard (I stupidly overlooked!):
a new computer located at IP address: 46.118.100.222
Our records show this IP address is in KIEV KYYIV UA
i first hope to get account back, and then the stuff. And hope they will improve the system where when you change your email you have to verify from your current, not from your new email :/
really sorry to see this happen. I hope you are able to get your stuff back :/
Hope you can get everything you were stolen :/ Do you see the accounts he send all your belongings? At least to flame those account D:
I got a message from your account from whoever had taken it over. When i pointed out it was a phishing link the cheeky shit even told me that your account had been hacked!
I got one from the Trusted Trader with +170/-0 rep. Something isn't right here maybe his account got phish?
Fortunately my browser block the site so i think i'm safe.
also bump
I clicked the link add friend but it didn't ask for my password and username it looked as if it logged me off then asked for my user and pass im guessing this is what everyone else saw? We need to keep all these threads going.
Sad to see alot of people have been hit.. I suspect this is work of some automated bot or a group of people
I was pm from 2 contacts with that link, thankfully im very paranoic and when i see that the profile didnt opened in my steam client i checked the url and saw the mismatch and inmediatelly blocked the url in my browser D:
Thanks for the information !!! Bump !!! Everyone should install an antivirus software, it will block website that have fraudulent sign
Just some of my hits....and a bump...
https://www.dropbox.com/s/08576j8lkukcjnw/Phishling-steam-2.jpg
https://www.dropbox.com/s/ci8227kt33o1mnz/Phishling-steam.jpg
Man, I think I'm going to change a few of my passwords now thanks for posting this.
If you read this thread, give it a bump so it stays at the top. Theres still reports of people getting hit.
Beware, two guys on my the friendlist have pm'ed me already, It goes something like this:
"Hey, My friend cant add you(steam error), Add him for talk, he is interest for trade :http://lsteamncommunity.com/id/crab323/ "
their profiles
http://steamcommunity.com/profiles/76561198068595304/
http://steamcommunity.com/profiles/76561198010267980/
Now I don't know if these accounts were hijacked and then just used for scamming or they are actually doing it. Just warning to those people.
More Info: details of the hijacker(s) from Steamguard
We've received a request to access your Steam account from the Steam Client on
a new computer located at IP address: 91.224.160.24
Our records show this IP address is in AMSTERDAM NOORD-HOLLAND NL
A new computer located at IP address: 46.118.100.222 Our records show this IP address is in KIEV KYYIV UA
Googling the IP address showed a lot of results related to hacking, botting and spamming. That IP is very notorious