New phishing scam puts your beloved Steam trading cards at risk | PCGamesN

League of Legends is close to making $1 billion from microtransactions this year

Outlast 2 is in development; stock up on clean underwear

Those crazy system requirements for Assassin's Creed Unity have been confirmed by Ubisoft

New phishing scam puts your beloved Steam trading cards at risk

Steam Guard phishing scam

A new phishing scam has found a way around Steam Guard, Valve has admitted. Steam Guard requires a code sent to the Steam users registered email address before it lets users on unrecognised devices access the platform. 

This scam bypasses the security completely and Steam have been warning people not to send  their SSFN files to anyone, as this is what the cheeky perpetrators have been using to access users’ libraries. 

The scam requests usernames and passwords for Steam and then tells the poor scammed sod to upload an SSFN file. The file normally resides in the Steam folder and exists to tell Steam Guard to not security check the computer. 

The file can then be used to gain access to the Steam account, since Steam Guard won’t do a security check on the computer exploiting it. This way funds can be drained from the wallet and trading cards can be sold or stolen. 

It is not, at least, possible for the scammer to purchase games, however, as that would still require bank/paypal information. 

It’s hardly elaborate and Steam details shouldn’t be given out to anyone, but people fall for obvious scams all the bleeding time. 

Cheers, Gamasutra.

Login or Register
3
+3
-0
Rob Zacny's picture
37

I shouldn't blame the victim. I really shouldn't. But ...come on.

2
+2
-0
Shriven's picture
1639

This.... This is more like Darwinism..

2
+2
-0
Belimawr's picture
437

realistically tho if this is possible it will only be a matter of time before people are incorporating sending the file over with a key logger to get the password and username.

so while it is kind of the persons fault if they fell for a phishing scam, it does also expose a massive gaping hole in the steam security.

1
+1
-0
avatar
20

Credit card information can be saved and re-used later for future purchases. Isn't it possibler phishers could use that to buy games or steam wallet funds?

Alienware - Game VictoriousNvidia Shield - Titanfall
Guild Wars 2: Tyria prepares for war with the return of the Living World Season 2

Guild Wars 2

Guild Wars 2: Tyria prepares for war with the return of the Living World Season 2

League of Legends is close to making $1 billion from microtransactions this year

League of Legends is close to making $1 billion from microtransactions this year

Outlast 2 is in development; stock up on clean underwear

Outlast 2 is in development; stock up on clean underwear

Those crazy system requirements for Assassin's Creed Unity have been confirmed by Ubisoft

Those crazy system requirements for Assassin's Creed Unity have been confirmed by Ubisoft

The Witcher 3's opening cinematic shows why you don't get into staring contests with crows

The Witcher 3's opening cinematic shows why you don't get into staring contests with crows

Football Manager 2014 has been played for 23,000 years, and that’s not including the pirates

Football Manager 2014 has been played for 23,000 years, and that’s not including the pirates

Stockholm Syndrome: Why Scandinavia loves DreamHack

Hearthstone: Heroes of Warcraft

Stockholm Syndrome: Why Scandinavia loves DreamHack

Phonopath turns you into an audio codebreaker

Phonopath turns you into an audio codebreaker

Shelter 2 trailer makes survival look gorgeous while being totally harrowing

Shelter 2 trailer makes survival look gorgeous while being totally harrowing

Flak in the USSR: World of Warplanes 1.6 introduces new Russian jets, more airspace

Flak in the USSR: World of Warplanes 1.6 introduces new Russian jets, more airspace

Codemasters' Toybox Turbos offers kitchen table careening in the mode of Micro Machines

Codemasters' Toybox Turbos offers kitchen table careening in the mode of Micro Machines

Riot chase down League of Legends hackers;

Riot chase down League of Legends hackers; "Every player to trigger this exploit will be punished"

Civilization: Beyond Earth review

Civilization: Beyond Earth

Civilization: Beyond Earth review

Blizzard to deploy Australian servers for World of Warcraft ahead of Warlords of Draenor

Blizzard to deploy Australian servers for World of Warcraft ahead of Warlords of Draenor

What to do in Assassin's Creed Unity's Paris: Murder, stealing and a bit of detective work

What to do in Assassin's Creed Unity's Paris: Murder, stealing and a bit of detective work

Take a free weekend break in Arma 3

Take a free weekend break in Arma 3

WildStar's Carbine Studios loses over 60 staff in NCSoft

WildStar's Carbine Studios loses over 60 staff in NCSoft "restructuring"

Oddworld: New 'n' Tasty will come to PC

Oddworld: New 'n' Tasty will come to PC "as soon as possible", and a beta is being considered

Warframe Archwing update turns you into a rocket-powered space ninja

Warframe

Warframe Archwing update turns you into a rocket-powered space ninja

Look at Dark Souls 2 through new eyes with the first-person mod

Look at Dark Souls 2 through new eyes with the first-person mod

3D Realms rises from the grave with a 32-game anthology

3D Realms rises from the grave with a 32-game anthology

World of Warcraft character transfers and changes discounted by 25%

World of Warcraft character transfers and changes discounted by 25%

Past Team Fortress 2 Halloween events reactivated to warm you up for Scream Fortress 6

Past Team Fortress 2 Halloween events reactivated to warm you up for Scream Fortress 6

Risk of Rain patch 1.2 adds killer chef and Aliens-inspired Loader

Risk of Rain patch 1.2 adds killer chef and Aliens-inspired Loader