ALERT: How to Avoid the Steam Phishing Attack

This is a heads up for all TF2F community members out there. There's a pretty nasty phishing attack going around Steam right now, where hackers are using compromised Steam accounts to message people on Friends list.

How the Attack Works

• You will receive a message from someone on your Friends list
• They then ask you to click a link (often advertising a "cool site" or "neat new tournament") and the  site will ask you to login.
• Once you login, your Steam credentials are compromised, and the hackers will then hijack your account.
• The site several people have seen ends in a .fr address.
• Big Lou (who has been compromised) also described an alternate attack where he booted his computer as usual, and saw his Steam login appear (again, as it normally does). This login box was actually a phishing login, and his credentials were stolen.

How Do I Avoid This Attack?

• Don't click any links sent to you via Steam message from your friends, until this whole thing is cleared up
• Characteristics of a compromised account include: poor grammar, poor spelling, a writing style that doesn't seem like your friend, and so forth
• Test the other person using a series of personal questions. See this post for a great example of how to do that.
• If you get a Steam login popup, close it. Instead, manually open Steam yourself, and login that way.

Okay, there you go. If people have more good suggestions, post them here. I know that several members of TF2F and AoC have been compromised already, so don't assume that you can trust messages from just anyone.

here's a good test question.

Who's the top 5 rappers of all time.


If it doesn't get that right...that doesn't fly

Another good question:

Which continent has the most potent thunder?

What are the two main styles of lockpicking?

Quote:
DYLAN, DYLAN, DYLAN, DYLAN, AND DYLAN. BECAUSE I SPIT HOT FIRE.

Actually, I didn't boot my computer... I let it run idol over night.  I just sat down at my desk and saw the login.

Quote:
Win. Pure win.

I haven't seen anything like that but I will keep alert. I don't want my account to be stolen.

By the way, come to this super cool website: www.weregoingtotakeyoursteamaccountandrapeyou.fr It's about a whole bunch or tournaments coming up!

>.>    <.<

Always remember, the only thing that will ever need to ask you for your steam login and password is steam.  Apparent Valve representatives, websites, and any other thing asking for passwords is not to be trusted.  I've found it best to always launch steam myself, and not at startup.  That way I know it is the actual program asking for my credentials.  As much $$$ as people have in their steam accounts, it's foolish to do otherwise.

If I message you ask me what clan I am in?

Most phishers on steam are total idiots. Be smart about who you are talking to and dont blindly click links.