Phishers and their links - post account details & link here

Re: Phishers and their links - post account details & link h

watch out for new type of phishers:

<a class="postlink" href="http://i.imgur.com/q4pZ9Wd.png" onclick="window.open(this.href);return false;">http://i.imgur.com/q4pZ9Wd.png</a>

And some discussion on Reddit: <a class="postlink" href="http://www.reddit.com/r/DotA2/comments/26yabh/scammers_using_a_new_way_to_bypass_the_url/" onclick="window.open(this.href);return false;">http://www.reddit.com/r/DotA2/comments/ ... s_the_url/</a>

 

Re: Phishers and their links - post account details & link h

| steamname: [unassigned]
| steamID32: STEAM_0:1:20139780
| steamID64: <a class="postlink" href="http://steamcommunity.com/profiles/76561198000545289" onclick="window.open(this.href);return false;">http://steamcommunity.com/profiles/76561198000545289</a>
| customURL:
| steamrep: <a class="postlink" href="http://steamrep.com/profiles/76561198000545289" onclick="window.open(this.href);return false;">http://steamrep.com/profiles/76561198000545289</a>

Code:

steancommuunity.com/id/pvinhaaa

 

Re: Phishers and their links - post account details & link h

Found another one:

| steamname: Jessy
| steamID32: STEAM_0:0:94518848
| steamID64: <a class="postlink" href="http://steamcommunity.com/profiles/76561198149303424" onclick="window.open(this.href);return false;">http://steamcommunity.com/profiles/76561198149303424</a>
| customURL:
| steamrep: <a class="postlink" href="http://steamrep.com/profiles/76561198149303424" onclick="window.open(this.href);return false;">http://steamrep.com/profiles/76561198149303424</a>

Code:

steamcomnmunitly.com/id/Fenix138/

 

Re: Phishers and their links - post account details & link h

Seems to be a new type of scam, had 2 today. Both added me directly, one sent me a message and the other posted a comment on my wall. Contains a link to a tiny picture, when you click on the picture to see a "bigger version" it downloads an SCR extension file.

 

Re: Phishers and their links - post account details & link h

SCR = EXE (ie opening it will execute it as a program)

Ye never come across them myself before this but seems to be a specific extension for screensavers.

 

Re: Phishers and their links - post account details & link h

On Steamrep forums they are posting every day such:



The image there in their posts link to some site that hosts a .scr file in auto-download, the small image is hosted on imgur.
Measures we had to take:
- Mattie changed parsing any known malware URL they used so far to change the url so the link won't work anymore.
- Mattie changed automatically text to have a header that it is "mallware", but that mainly is because their text is always the same, hence he could do that.
- admins and mods are all warned to handle it with the "SPAM" button, and let it delete everything and ban the f*****s etc.
- If a new URL pops up, we warn mattie, to add it to the blacklist to let it be auto-parsed to a different link.

 

Re: Phishers and their links - post account details & link h

We had the last couple of days some 100 accounts created on SR, by spambots, all registered to [email protected] / [email protected] / [email protected] mail addresses. Those cannot register anymore with us. We've banned all accounts that where having "random" names like username "sa35qyuz" with "[email protected]" as mail address.

Annoying bastards.

 

Re: Phishers and their links - post account details & link h

It's the 5th try that somebody tries to phish me.

They post this on every Steam wall they can find: "Hey, sorry to bother you, I recently started to play TF2 and I need some help in unboxing an unusual. Could you help me and look at this picture *INSERT PHISHING LINK HERE* Thanks and blablabla".
Just click on the "Delete" button right next to his comment or report them instantly to steam support.

This could be really dangerous, some months ago they added you and tried to send you to the wrong webside, now they don't even have to add you.

If you are new in trading: Do never klick on a suspicious link and NEVER enter your password on a webside which someone sends you.

 

Re: Phishers and their links - post account details & link h

Herppi: hello
Mr.Donut: Hello, my name is Anna , I'm looking for a friend to play together and communicate ))
Mr.Donut: I am 19 years old and I live in Russia
Herppi: uh huh
Mr.Donut: This is my photo -

Code:

http://8b.kz/IMG_03112014_1942422

Herppi: lolno.jpg

 

Re: Phishers and their links - post account details & link h

Brad: add this guy for trade,he just can't add you for some reason...

Spoiler

htt /steamcommurniti.com/id:/FAtmangoodtrader228 PS: I removed the http://

^ Do not klick this link ^

| steamname: Brad
| steam3ID: [U:1:61706691]
| steamID32: STEAM_0:1:30853345
| steamID64: <a class="postlink" href="http://steamcommunity.com/profiles/76561198021972419" onclick="window.open(this.href);return false;">http://steamcommunity.com/profiles/76561198021972419</a>
| customURL: <a class="postlink" href="http://steamcommunity.com/id/pittbrad" onclick="window.open(this.href);return false;">http://steamcommunity.com/id/pittbrad</a>
| steamrep: <a class="postlink" href="http://steamrep.com/profiles/76561198021972419" onclick="window.open(this.href);return false;">http://steamrep.com/profiles/76561198021972419</a>

Spoiler

This guy was since a month in my friendlist. I guess the new method is -> Adding random player, waiting a couple of weeks saying nothing, try to phish.