1. The trade part of Lethal Zone has fully been taken over by FoG (Fortress of Gamers) and this site can no longer be used to make appeals. If you feel that your tag is unjust, please file an appeal over at https://f-o-g.eu.trade instead.

Important BEWARE OF PHISHING LINKS

Discussion in 'Trade Chat' started by 300_Angry_Kittens, Mar 6, 2014.

  1. 300_Angry_Kittens

    300_Angry_Kittens Registered

    Joined:
    Jul 27, 2010
    Messages:
    2,304
    Likes Received:
    5
    TL;DR DO NOT ENTER YOUR STEAM LOGIN DETAILS ON ANY WEBSITE OTHER THAN <a class="postlink" href="http://steamcommunity.com/" onclick="window.open(this.href);return false;">http://steamcommunity.com/</a>

    There seems to be a new trend going around recently of getting random adds from people saying something like "Add my friend he has a really good offer". They will then supply what looks like a steam profile link but is in fact a link to a fake steam community site. This then requests your steam login details to allow you to add them, but is of course just designed to steal them so they can take over your steam account and steal your inventory etc.

    I've been getting at least 2 a day for the past few weeks, but I would consider myself a high profile trader, especially with my profile available to anyone who buys something on TF2shop, where I get high exposure to the trading community.

    A good rule of thumb would be to bookmark the official steam community page and login into it when you are going to authorising access to a website such as TF2 outpost, or following a steam community link someone gave you. If after logging in you follow the link and the page asks for your login details again then you know it is fake, as the real steam community remembers logins across browsing sessions.

    If you do receive a phishing link like this then please report the offenders Steam profile for phishing.


    It will normally be a very slight difference to the normal steam community page, for example:

    This is my original:
    <a class="postlink" href="http://steamcommunity.com/id/300_Angry_Kittens" onclick="window.open(this.href);return false;">http://steamcommunity.com/id/300_Angry_Kittens</a>

    A phishing one may look like this, where one "m" has been replace with an "n":
    Code:
    http://steamcomnunity.com/id/300_Angry_Kittens
    Or the "i" has been replaced with an "l":

    Code:
    http://steamcommunlty.com/id/300_Angry_Kittens
    If you note the first example is actually a webspace that exists.
     
  2. klenium

    klenium Registered

    Joined:
    Jan 19, 2014
    Messages:
    40
    Likes Received:
    0
    These texts are too typical, don't need to check the link, just remove them from the friend list. Also, I'm always logged into the steam community page (that's the only page where I need to enter my details twice), so if I can't see my name in the top-right side, instant close the tab.
     
  3. Chride2k8

    Chride2k8 Not so custom title

    Joined:
    Apr 10, 2012
    Messages:
    1,370
    Likes Received:
    74
    Yup, this shit is pretty common...no clue where this latest wave has originated from, I guess that some one has successfully made a spambot that actually works. Today I have only got 2 random adds with "My friend wants to trade with you, add him <a class="postlink" href="http://www.randomphishinglink.com" onclick="window.open(this.href);return false;">www.randomphishinglink.com</a>". But in total from the beginning of this week I have got over 10 of these...well, just adding all to my blocklist :p
     
  4. Repulsion Gel

    Repulsion Gel Registered

    Joined:
    Sep 21, 2011
    Messages:
    796
    Likes Received:
    1
    I started unusual trading again a few weeks ago and I became a phishing link magnet.
    what really suprises me is the amount of people actuall falling for this..
     
  5. DataStorm

    DataStorm Registered

    Joined:
    Jan 5, 2010
    Messages:
    2,014
    Likes Received:
    64
    I'd really advice to have the FAKE links NOT clickable.... (remove [ url = tags and put them between [ code ] tags).

    I've had like ~50 of them the last couple weeks.

    Also, best action is to steam profile report them for phishing....
     
  6. 300_Angry_Kittens

    300_Angry_Kittens Registered

    Joined:
    Jul 27, 2010
    Messages:
    2,304
    Likes Received:
    5
    As the links didn't actually exist I didn't bother, but done.

    Also added the report suggestion to OP, thanks.
     
  7. DataStorm

    DataStorm Registered

    Joined:
    Jan 5, 2010
    Messages:
    2,014
    Likes Received:
    64
    well, at some point of time they will exist, or did exist. Better safe then sorry.
     
  8. klenium

    klenium Registered

    Joined:
    Jan 19, 2014
    Messages:
    40
    Likes Received:
    0
    Code:
    15:49 - Vadimaid: Hi. My friend want to trade with you.
    http://steamcomrnuhity.com/id/proplayer95 
     Add him. 
    15:50 - kléni: Hi
    15:50 - kléni: Bye
    15:50 - Vadimaid most Offline.
    
    19:02 - eromi1 (austria): Hey! I cant add u from my main acc - steam laggs, i have really good offer 
    :csgogun: http://steamccmrnunity.com/profiles/91253794705953791/ add me please. thanks!
    19:02 - kléni: Hi
    19:02 - kléni: bye
    19:02 - eromi1 (austria) most Offline.
    
    Easy. ^^
    DITED TO CODE BY CAMPER