EDITED

Account was hacked/phished, it was returned under control by changing password

screenshot of steam support request
https://imgur.com/a/uLvtttD

Hey, my account getting hacked somehow. There is someone ask same question like this to me. and then I login with steam account on that site. So sorry the trouble I made. I just hope there is nobody getting hacked. I have like 200+ friend. I dont know what to do.

Contact Steam Support and tell them you believe you may have been phished.
Also, update your malware/virus scanner and reboot your machine. You may have a new key-logger installed on your computer.

Contact steam support asap. state that you're the user private email, name etc and if you have kept a receipt from previous steam purchase as well

Useful info and tips

quotes - main highlights from topic

you can check websites here - https://who.is
site was registered today - so yes, it's a scam

Notice how the fake in-page popup (the inner one with white decoration) is mimicking a chrome tab, which doesn't really look like my Firefox style (the outer one with dark theme).
The important thing here is noting it's not a real tab/window, just a fake form inside the same page.

For future reference: go directly to steamcommunity.com and login to your account, then go to whatever site you're trying to log into, if the site is still asking for your password you're being phished.

someone from my friendlist told me to do the same thing. i refused. was connected to my steam account already but this site asked me to connect again...

It's pretty common method of scam, just never click on any kind of links people send to you, as simple as that.

remind people to refresh their Steam API keys periodically or after they logged in on a dodgy website

OLD POST

got today message from someone I traded with, asked to vote for his team on site,
after some chat I tried to login on that site and Steam Guard didn't liked it, like some third party from another country was in the middle, dont remember something like that happening before, changed steam pass immediately after I understood thats something is wrong. for now everything is ok with my account, obviously I used not my main account and mail (but I still not ok loosing it)

after I asked of him whats going on (maybe too straightforward), he instead of asking me what happened deleted me from friends which only puts more fuel in fire of suspicions for me

he has 375 friend and tons of positive rep on steam trades, maybe I am overreacting but I decided to report him on steam in case his account was really hijacked and make this warning post

also from now on I have new steam protocol - no fkn links from sites I dont know

thanks forward for everyone with useful comments about situation

Screenshots on Imgur

5 months ago*

Comment has been collapsed.

Phishing ?

View Results
Yes
Maybe
No
No, you overreacting
Don't know
Deleted

This comment was deleted 4 months ago.

5 months ago
Permalink

Comment has been collapsed.

The login page does not exist not, so it's kinda hard to tell what happened here.

Just want to remind that all sign-in / login forms have to be in steam domain ( https://steamcommunity.com/openid/login?<params>), and yours most likely was in some random .ml / .xyz domain.

5 months ago
Permalink

Comment has been collapsed.

Edit to my post, just found out login page on bottom, clicked it and window opened, then I tried to move out this window to second screen and it was big WTF moment.

SCAM 100%.

5 months ago
Permalink

Comment has been collapsed.

That esport4play site was registered today - whois - so yes, it's a scam.

I'm pretty impressed Steam gives that warning.

Edit: Content stolen from epulze.com - unless that site is a scam too. Trust no-one!

5 months ago*
Permalink

Comment has been collapsed.

thanks for the info, now I know additional way to check whats going on

5 months ago
Permalink

Comment has been collapsed.

For what it's worth, I reported the site to Google.

5 months ago
Permalink

Comment has been collapsed.

also reported

5 months ago
Permalink

Comment has been collapsed.

ran into this a few months ago, blacklisted the friend i had known and talked with for some time and warned others who we both knew. i thought her account may have been phished.

5 months ago
Permalink

Comment has been collapsed.

View attached image.
5 months ago
Permalink

Comment has been collapsed.

Yeah, yesterday I was also contacted by a trader who told me absolutely same.

Glad I ignored him.

5 months ago
Permalink

Comment has been collapsed.

Gath? He's on my friends list too. Been there for some time. Never tried to send ME any messages like that. Are you sure it's his profile?

5 months ago
Permalink

Comment has been collapsed.

yes, I posted screenshots on Imgur, and both (old and new) links on his account, after he deleted me from friends there no other Gath in my friend list

5 months ago
Permalink

Comment has been collapsed.

We'll see. I messaged him with this topic asking if he's ok. No response. I'll see after I get home from work.

5 months ago
Permalink

Comment has been collapsed.

The same guy messaged me today as well with the same request. It's him, but I don't know if his account was hacked or its him sending the messages.

5 months ago
Permalink

Comment has been collapsed.

I also had Gath on my friendslist after having done a trade with him and went with it to begin with but changed my password after reading about the discussion here.
Blocked and unffriended them after i learned the truth about the site.

My Convo with GaTh
Part 1: https://gyazo.com/02c2bc40be9b7f6822ab26672ac4542a
Part 2: https://gyazo.com/11189708c782522538edc56c3fe52fd9
Part 3: https://gyazo.com/b6ea9f1556d4579f297aead8cdbedee5

He was quite silent after we traded a year back or so and suddenly started asking me to do it quickly, i can only imagine he lost his mind sacrificing his account for something like this or got hacked.
If he got hacked i do hope he somehow regains his account but the damage this caused will nonetheless stick onto his reputation.

5 months ago
Permalink

Comment has been collapsed.

The person who contacted me was Gath aswell, I just can't double check the account now because they removed me and I can't access the chat log anymore.

5 months ago
Permalink

Comment has been collapsed.

Thank you for the useful links! :)

Sadly, the conversation with the phisher doesn't show up, I suppose it's because they removed me from friend list, but at least I don't see any suspicious conversation of them using my account (which could also be due to the affected people having removed me from friends if it did happen xD)

I found the last link yesterday, had a RU login on the day, I have since updated my pw and refreshed steam API:| momentary carelessness leads to so much trouble T_T

5 months ago
Permalink

Comment has been collapsed.

Got similar scam too. Also from what could be called prominent user.

Key clue that something wishy was going on was that login page had a picture of cert icon... Of Chrome while I was on Firefox... And fishy title bar...

5 months ago
Permalink

Comment has been collapsed.

I think you should write a huge bold warning before that spoiler-tagged link you've provided in the post. Someone could lose their account just by signing up there out of curiosity!

And that's obviously phishing, just look at the sign-up page's link. THAT'S A SCAM!

5 months ago
Permalink

Comment has been collapsed.

year, good call, changed, its on screenshot too for history,
never was scammed before), I assume I was in very good mood when I got the message and my suspicios mode got alerted later than normal (, glad I still used twink for it )

5 months ago
Permalink

Comment has been collapsed.

It's clearly a fake login page designed to steal your password, especially obvious if like me you're not using the Chrome browser.

Notice how the fake in-page popup (the inner one with white decoration) is mimicking a chrome tab, which doesn't really look like my Firefox style (the outer one with dark theme).

The important thing here is noting it's not a real tab/window, just a fake form inside the same page...

View attached image.
5 months ago
Permalink

Comment has been collapsed.

Just got the same, I'm actually impressed, I didn't see that one yet

5 months ago
Permalink

Comment has been collapsed.

As a regular on the Steam forums I saw this scam method posted very often. Alas people still seem to fall for it.

5 months ago
Permalink

Comment has been collapsed.

also from now on I have new steam protocol - no fkn links from sites I dont know

How about a new internet protocol: check the page URL whenever you're entering sensitive data, and reject all popups? This way you can still browse "sites you don't know", which is pretty much what the Internet was about before Big Tech invaded it.

5 months ago*
Permalink

Comment has been collapsed.

someone from my friendlist told me to do the same thing. i refused. was connected to my steam account already but this site asked me to connect again...

5 months ago
Permalink

Comment has been collapsed.

It's pretty common method of scam, just never click on any kind of links people send to you, as simple as that.
Well, maybe some sites can be exception, like Gyazo or Imgur, like if they are world-known

5 months ago
Permalink

Comment has been collapsed.

I never have anyone trying to phish me...even phishers don't like me :(

5 months ago
Permalink

Comment has been collapsed.

Here is a special link, just for you, so you don't feel "left out."

5 months ago
Permalink

Comment has been collapsed.

Deleted

This comment was deleted 5 months ago.

5 months ago
Permalink

Comment has been collapsed.

The same guy messaged me today with the same request, had to remove him from my friends list.

5 months ago
Permalink

Comment has been collapsed.

I had 2 people message me about voting LOL

5 months ago
Permalink

Comment has been collapsed.

Only two? I've been getting daily phone calls, emails, and messages, all regarding voting. P

5 months ago
Permalink

Comment has been collapsed.

For future reference: go directly to steamcommunity.com and login to your account, then go to whatever site you're trying to log into, if the site is still asking for your password you're being phished.

5 months ago
Permalink

Comment has been collapsed.

great tip, I usually dont login in browser, definitely would have noticed fake login request earlier

5 months ago
Permalink

Comment has been collapsed.

Hey, my account getting hacked somehow. There is someone ask same question like this to me. and then I login with steam account on that site. So sorry the trouble I made. I just hope there is nobody getting hacked. I have like 200+ friend. I dont know what to do.

5 months ago
Permalink

Comment has been collapsed.

I checked your account literary right now and it seems steam is in action by switching off friends list, you d better talk to steam support and not send friend requests to users like me from maybe still compromised account

5 months ago
Permalink

Comment has been collapsed.

Isn't changin password, making my account on all device quit?

5 months ago
Permalink

Comment has been collapsed.

I assume it have to, I meant I still dont know if its you or hacker, if you want to tell me somthing do it here

5 months ago
Permalink

Comment has been collapsed.

Yeah its me, I think hacker don't do forum like this. I'm not sure. But I really need someone to help me. So my name can be clear. I mean there is a guy got hacked too and send me this phising link, I'm so stupid to help with this vote. but his account already getting backed. I hope other people not fall into this anymore

5 months ago
Permalink

Comment has been collapsed.

I really dont know how can I help you, only thing comes to mind post screenshots of your steam support request for everyone in these topic (without personal info)

5 months ago
Permalink

Comment has been collapsed.

okay

5 months ago
Permalink

Comment has been collapsed.

5 months ago
Permalink

Comment has been collapsed.

Contact Steam Support and tell them you believe you may have been phished.

Also, update your malware/virus scanner and reboot your machine. You may have a new key-logger installed on your computer.

5 months ago
Permalink

Comment has been collapsed.

okay will do

5 months ago
Permalink

Comment has been collapsed.

Deleted

This comment was deleted 5 months ago.

5 months ago
Permalink

Comment has been collapsed.

As a veteran user of our site, it is expected that you are familiar with our past rules about "calling out" other users and try to avoid doing so. As our rules have (somewhat) recently changed, however, let me remind you and everyone else of what to avoid.

First, you should avoid "naming and shaming" specific users within the forum as this could amount to personal attacks and/or hate speech. In almost all instances, it is possible to discuss a matter without resorting to such tactics, and most topics of discussion do not require the names of specific individuals.

Second, our currently Guidelines specifically prohibit the public disclosure of someone else's private and/or identifying information. This includes, but is not limited to, names, addresses, phone numbers, photos, and private messages. The Guidelines also prohibit the posting of unsafe content, such as links to scams and dangerous websites.

In hindsight, your original post, while apparently made with good intentions, could be seen as violating a few of our rules. In the future, please be mindful of how you construct your posts and the manner in which those posts may be interpreted. (Yes, it was entirely possible for your original post to have been written in compliance with our Guidelines.)

5 months ago*
Permalink

Comment has been collapsed.

even if I read them it was very long ago 😀, noted, because owner of the account appears to be here I will del his personal info exept chat screenshot

5 months ago*
Permalink

Comment has been collapsed.

And I thank you for making this thread, maybe this will be help some people knowing this phising method. I just want to fix everything right now. Could someone help me?

5 months ago
Permalink

Comment has been collapsed.

Contact steam support asap. state that you're the user prvide email, name etc and if you have kept a receipt fro ma previous steam purchase as well

5 months ago
Permalink

Comment has been collapsed.

Okay I see, will try to do it

5 months ago
Permalink

Comment has been collapsed.

I got message from steam support, like this

Thanks for contacting Steam Support.

It looks like your account was compromised. However, you've since updated your password. This should prevent any further unauthorized access to your account.

If you're concerned about security, check out our Security Recommendations article.

That being said, if you have any further questions, please let us know - we will be happy to assist you.

Steam Support

So, I'm free from the hacker?

5 months ago
Permalink

Comment has been collapsed.

As long as you have not downloaded any malware to your computer (possibly by clicking on a link), and have cleaned your computer of any virus or malware it may have had, you should be OK. Key-logger programs are often transferred to computers via links or "updates" to legitimate software. Once on your computer, they send your keystrokes back to the hacker, telling him everything you type (including "new" passwords).

5 months ago
Permalink

Comment has been collapsed.

I see, I guess I never download anything from that site. So I hope this will be over.

5 months ago
Permalink

Comment has been collapsed.

is there a direct way to contact steam support - all i found was to make a thread

5 months ago
Permalink

Comment has been collapsed.

5 months ago
Permalink

Comment has been collapsed.

Well, after coming home from work, I see that Gath has unfriended me. Oh well, Guess the guy that took control knows we are on to him now.

Edit- Just found his profile and he has this message on it-
Hey I'm sorry if there any trouble I make, Because my account get hacked. But I'm already taking it back. If you already got the phising link and want to talk about it, just add me back so we can solved this problem together.

5 months ago*
Permalink

Comment has been collapsed.

one reason I don't have many friends
I don't play multiplayer anyway

5 months ago
Permalink

Comment has been collapsed.

Sign in through Steam to add a comment.