TL;DR DO NOT ENTER YOUR STEAM LOGIN DETAILS ON ANY WEBSITE OTHER THAN <a class="postlink" href="http://steamcommunity.com/" onclick="window.open(this.href);return false;">http://steamcommunity.com/</a> There seems to be a new trend going around recently of getting random adds from people saying something like "Add my friend he has a really good offer". They will then supply what looks like a steam profile link but is in fact a link to a fake steam community site. This then requests your steam login details to allow you to add them, but is of course just designed to steal them so they can take over your steam account and steal your inventory etc. I've been getting at least 2 a day for the past few weeks, but I would consider myself a high profile trader, especially with my profile available to anyone who buys something on TF2shop, where I get high exposure to the trading community. A good rule of thumb would be to bookmark the official steam community page and login into it when you are going to authorising access to a website such as TF2 outpost, or following a steam community link someone gave you. If after logging in you follow the link and the page asks for your login details again then you know it is fake, as the real steam community remembers logins across browsing sessions. If you do receive a phishing link like this then please report the offenders Steam profile for phishing. It will normally be a very slight difference to the normal steam community page, for example: This is my original: <a class="postlink" href="http://steamcommunity.com/id/300_Angry_Kittens" onclick="window.open(this.href);return false;">http://steamcommunity.com/id/300_Angry_Kittens</a> A phishing one may look like this, where one "m" has been replace with an "n": Code: http://steamcomnunity.com/id/300_Angry_Kittens Or the "i" has been replaced with an "l": Code: http://steamcommunlty.com/id/300_Angry_Kittens If you note the first example is actually a webspace that exists.
These texts are too typical, don't need to check the link, just remove them from the friend list. Also, I'm always logged into the steam community page (that's the only page where I need to enter my details twice), so if I can't see my name in the top-right side, instant close the tab.
Yup, this shit is pretty common...no clue where this latest wave has originated from, I guess that some one has successfully made a spambot that actually works. Today I have only got 2 random adds with "My friend wants to trade with you, add him <a class="postlink" href="http://www.randomphishinglink.com" onclick="window.open(this.href);return false;">www.randomphishinglink.com</a>". But in total from the beginning of this week I have got over 10 of these...well, just adding all to my blocklist
I started unusual trading again a few weeks ago and I became a phishing link magnet. what really suprises me is the amount of people actuall falling for this..
I'd really advice to have the FAKE links NOT clickable.... (remove [ url = tags and put them between [ code ] tags). I've had like ~50 of them the last couple weeks. Also, best action is to steam profile report them for phishing....
As the links didn't actually exist I didn't bother, but done. Also added the report suggestion to OP, thanks.
Code: 15:49 - Vadimaid: Hi. My friend want to trade with you. http://steamcomrnuhity.com/id/proplayer95 Add him. 15:50 - kléni: Hi 15:50 - kléni: Bye 15:50 - Vadimaid most Offline. 19:02 - eromi1 (austria): Hey! I cant add u from my main acc - steam laggs, i have really good offer :csgogun: http://steamccmrnunity.com/profiles/91253794705953791/ add me please. thanks! 19:02 - kléni: Hi 19:02 - kléni: bye 19:02 - eromi1 (austria) most Offline. Easy. ^^ DITED TO CODE BY CAMPER