[PSA] Phishing scam hijacking friendly accounts and asking you to vote for a CS team or similar

Occasional messages from my trader friends hijacked accounts for something similar and this has been going on for 2+ months

What is this scam:
Hijackers impersonate and go through the steam friend list of the compromised account, asking other users to "help vote" or similar stories, but basically it's to access a fake website in order to grab your steam login details.

• Always login from steam's website, if you are logged in Steam on the browser, legit third party websites will not ask you for the login details again.

If you are contacted by someone (friend or trade acquaintance) asking you to go to a suspicious link/login
It is possible that the owner of the account is a victim themselves, you can help by leaving them a message on SG or ST to let them know what happened.

• To find the user on either SG or ST, you may need to find their steamID, if you can't grab their steamID directly, look up their nickname on websites like https://steamrep.com/ or https://barter.vg/u/
  (barter user's profile page comes with links to their ST aswell), once you have the steam ID, put this in the address bar https://www.steamgifts.com/go/user/<Steam ID here> or just the "user search bar" on ST.

If you think your account may have been compromised
check for unusual activities
https://help.steampowered.com/en/accountdata
https://help.steampowered.com/en/accountdata/SteamLoginHistory
https://help.steampowered.com/en/accountdata/ThirdPartyLogins

1. Change your password
2. Refresh your API https://steamcommunity.com/dev/apikey
3. Deauthorize all logged in devices https://store.steampowered.com/twofactor/manage
4. Perhaps run a virus check for keyloggers etc.

Discussion threads about this
https://www.steamgifts.com/discussion/fbpD1/psa-example-of-phishing-attempts-user-got-account-back