New phishing scam puts your beloved Steam trading cards at risk | PCGamesN

We've got 1000 UK keys for the World of Tanks Generals closed beta. Fancy one?

Skyrim Workshop's file size limit has been sent to oblivion

Is AMD walking away from Mantle?

New phishing scam puts your beloved Steam trading cards at risk

Steam Guard phishing scam

A new phishing scam has found a way around Steam Guard, Valve has admitted. Steam Guard requires a code sent to the Steam users registered email address before it lets users on unrecognised devices access the platform. 

This scam bypasses the security completely and Steam have been warning people not to send  their SSFN files to anyone, as this is what the cheeky perpetrators have been using to access users’ libraries. 

The scam requests usernames and passwords for Steam and then tells the poor scammed sod to upload an SSFN file. The file normally resides in the Steam folder and exists to tell Steam Guard to not security check the computer. 

The file can then be used to gain access to the Steam account, since Steam Guard won’t do a security check on the computer exploiting it. This way funds can be drained from the wallet and trading cards can be sold or stolen. 

It is not, at least, possible for the scammer to purchase games, however, as that would still require bank/paypal information. 

It’s hardly elaborate and Steam details shouldn’t be given out to anyone, but people fall for obvious scams all the bleeding time. 

Cheers, Gamasutra.

Login or Register
3
+3
-0
Rob Zacny's picture
65

I shouldn't blame the victim. I really shouldn't. But ...come on.

2
+2
-0
Shriven's picture
2098

This.... This is more like Darwinism..

2
+2
-0
Belimawr's picture
578

realistically tho if this is possible it will only be a matter of time before people are incorporating sending the file over with a key logger to get the password and username.

so while it is kind of the persons fault if they fell for a phishing scam, it does also expose a massive gaping hole in the steam security.

1
+1
-0
avatar
24

Credit card information can be saved and re-used later for future purchases. Isn't it possibler phishers could use that to buy games or steam wallet funds?

Try these free to play games
?

These are affiliate links - clicking them and playing the games directly supports PCGamesN

Spotlight
?

Our Spotlight units plug content our journalists have made, that our advertisers want to promote. Sometimes the promotion is paid for, but the content they go to is always independent with no client oversight or approval.


Alienware - Game VictoriousTurtle Beach
We've got 1000 UK keys for the World of Tanks Generals closed beta. Fancy one?

World of Tanks Generals

We've got 1000 UK keys for the World of Tanks Generals closed beta. Fancy one?

Skyrim Workshop's file size limit has been sent to oblivion

Skyrim Workshop's file size limit has been sent to oblivion

Is AMD walking away from Mantle?

Is AMD walking away from Mantle?

GOG launches another Insomnia sale, with a twist: Double Insomnia

GOG launches another Insomnia sale, with a twist: Double Insomnia

Blizzard introduce

Blizzard introduce "WoW Token", which is like EVE's PLEX for World of Warcraft

Unreal Engine 4 is now free for everyone

Unreal Engine 4 is now free for everyone

Total War: Attila review

Total War: ATTILA

Total War: Attila review

Job Simulator is SteamVR's first game, and it's a simulation inside a simulation

Job Simulator is SteamVR's first game, and it's a simulation inside a simulation

Dean Hall partners with Improbable “to make the video games that nobody would dare make”

Dean Hall partners with Improbable “to make the video games that nobody would dare make”

From Russia with love: Heroes & Generals update adds Soviet faction, 1,000 new battlefields, and 14 new vehicles

From Russia with love: Heroes & Generals update adds Soviet faction, 1,000 new battlefields, and 14 new vehicles

Trine 3: The Artifacts of Power trailer shows off 3rd person perspective

Trine 3: The Artifacts of Power trailer shows off 3rd person perspective

Multiplay bought out by GAME for £20m

Multiplay bought out by GAME for £20m

Making it in Unreal: bringing combo combat to the PC in Age of Blood

Age of Blood

Making it in Unreal: bringing combo combat to the PC in Age of Blood

Stealth Inc 2 sneaking out of Wii U exclusivity and onto PC

Stealth Inc 2 sneaking out of Wii U exclusivity and onto PC

This Death’s Gambit trailer shows off colossal boss battles

This Death’s Gambit trailer shows off colossal boss battles

Join World of Warcraft player

Join World of Warcraft player "Doubleagent" as he dings level 100 as a neutral Pandaren

Valve partners with HTC to produce virtual reality headset

Valve partners with HTC to produce virtual reality headset "HTC Vive" using SteamVR

Hearthstone heralds March ranked season with fiery Ragnaros card back

Hearthstone heralds March ranked season with fiery Ragnaros card back

The thirty best Minecraft mods

Minecraft

The thirty best Minecraft mods

InXile to give Wasteland 2 a graphical overhaul with Unity 5 engine

InXile to give Wasteland 2 a graphical overhaul with Unity 5 engine

Elite: Dangerous to see new station orbiting planet Vulcan, named after the late Leonard Nimoy

Elite: Dangerous to see new station orbiting planet Vulcan, named after the late Leonard Nimoy

The best Hearthstone decks for beginners

The best Hearthstone decks for beginners

Weekend Deal Dump: Maps, maps, maps

Weekend Deal Dump: Maps, maps, maps

Remembering Leonard Nimoy in games

Remembering Leonard Nimoy in games