I've noticed that these groups provide some giveaways recently. The point is- you have to log into your Steam Account if you want to enter.

But...

If you are already logged into steam and a site asks you for your steam password there is a huge risk of a phishing attack...
What do you think? Are my concerns reasonable or not?

4 years ago

Comment has been collapsed.

Do you think they try to scam users?

View Results
Yes
Never ever
You know they can see us, so Potato

Check if its really steams site you are redirected to. Like for example you have saved your password and it autofills.

4 years ago
Permalink

Comment has been collapsed.

Activate Steam Guard.

4 years ago
Permalink

Comment has been collapsed.

I already have. And i dont plan to enter any information there ^^

4 years ago
Permalink

Comment has been collapsed.

Couldn't a phishing site to just passthrough the Steam Guard code?
I know it would be far less likely, but there's ample Steam client emulators (like ASF) out there that will accept your Steam Guard code, pass it through, and store whatever auth-type token Steam passes back.
So its not like a Steam Guard code is bulletproof to protect you against all phishing.

4 years ago
Permalink

Comment has been collapsed.

You can always get your account back with your mobile phone. I am saying again; activate steam guard, don't worry too much.

4 years ago
Permalink

Comment has been collapsed.

But if it is a bad site, they will steal your account, remove steam guard, change your password and email, and steal everything from your inventory. Then you will get your account back after you contact Steam, but none of your stuff will be returned.

4 years ago
Permalink

Comment has been collapsed.

Who has expensive stuff in his/her inventory and not careful about pishing sites? I'd like to meet him/her. Personally my inventory is worth 50 cents max and still I can tell if it is a pishing site when I see one.

4 years ago
Permalink

Comment has been collapsed.

The user is specifically asking about a site that may not be legit and you said to activate steam guard and not worry too much. Activating steam guard is not going to prevent your account from being hijacked by a bad site, so I don't understand why you think you don't have to worry about bad sites once you have steam guard activated.

Also, a lot of people have stuff in their inventory that can add up to a lot of money and they don't want to lose it, possibly hundreds of dollars worth of stuff. A lot of people also have money on their steam account.

This is becoming a widespread problem and a lot of people fall for it. Just do a search here on the SG discussions for the word "account" or "hijacked" and see how many threads were created by users who had their accounts hacked with steam guard on.

4 years ago
Permalink

Comment has been collapsed.

This became a widespread problem already, you can see discussions on SG about this problem as you said. So why the user asks about a specific site? Should we open a discussion on every shady site we encounter?

As I said if someone have hundreds of dollars worth of stuff they won't fall these kinda shenanigans so easily. If you are an ordinary user who has not much worth of stuff still you won't fall these kinda shenanigans so easily after all the warnings from various sources. I activated steam guard and that is more than enough for me.

One more thing that bothers me though. Why someone who has hundreds of dollars worth of stuff enters these kinda sites to get free games?

4 years ago
Permalink

Comment has been collapsed.

Nothing you are saying is relevant. This conversation was about whether steam guard will protect you from shady sites, not whether users have read previous SG discussions, know about accounts being hijacked, are opening discussions about shady sites, or have expensive items in their inventory. None of that matters.

Everyone on SG doesn't read every discussion created or pay attention to any discussions for that matter. This issue is widespread, but that doesn't mean everyone knows about it. Just because you don't have anything in your inventory doesn't mean nobody else does. Why can't traders with hundreds of dollars of items in their inventory use sites to get free games? Free is free. These people might know about staying safe while trading or buying and selling items, but they may not be aware of how accounts are hijacked by sites that mimic the steam login and steam guard page.

There are reasons why people wouldn't want their Steam account hijacked other than just losing inventory items. What if they just want to play their games and not be stuck waiting for support to fix the situation. What of the hijacker uses the account to use hacks and gets the account VAC banned?

Telling someone to just enable steam guard and not worry is bad advice. You may not care about your steam account but other people might.

4 years ago
Permalink

Comment has been collapsed.

Come on now, you mention traders, they know this kind of traps alright. The user knows, he didn't just think about it and open discussion. He sure read at least something about it. These pishing sites are after your inventory or they try selling your account to someone, it is very unlikely they play your game and get you a vac ban. Don't be too paranoid man.

I said activate steam guard, it is a must-do. It doesn't mean you are safe now, enter whereever you want.

4 years ago
Permalink

Comment has been collapsed.

If you are already logged into steam and a site asks you for your steam password

That should be enough to go away.

4 years ago
Permalink

Comment has been collapsed.

+1

4 years ago
Permalink

Comment has been collapsed.

Deleted

This comment was deleted 4 years ago.

4 years ago
Permalink

Comment has been collapsed.

Their website is blank for me right now. Did they really ask for the Steam password?

4 years ago
Permalink

Comment has been collapsed.

thats what i meant... I'm logged into steam within my browser. If I enter a third party site, there should be my avatar now and and a login.
The weird thing is, there is a empty fill at this particular side which asks me for my password..

4 years ago
Permalink

Comment has been collapsed.

Logged into steam client is separate from logging into Steam web-page.
I have the web-page autofill, if it doesnt autofill, I avoid that site.

4 years ago
Permalink

Comment has been collapsed.

I'm logged into steam within my browser. If I enter a third party site, there should be my avatar now and and a login.
The weird thing is, there is a empty fill at this particular side which asks me for my password..

4 years ago
Permalink

Comment has been collapsed.

Better to be paranoid and avoid then.

4 years ago
Permalink

Comment has been collapsed.

Closed 3 years ago by LittleFreak.