I got this steam message today through chat. This is (probably) a phising attempt, do not click it, do not log in or whatso-ever. You will lose your steamaccount! Just a headsup sinds others may have that particular friend in their list too.
Yeah, they keep trying. Only a few days ago I got an Steamfriends message from someone calling himself SteamFreeGift or something like that sending a message that you could get a Free Gift if you followed the link. Blocked him immediately and warned the admin of the Steamfriends group he was in. Unfortenately many people still buy this crap....