New phishing scam puts your beloved Steam trading cards at risk | PCGamesN

World of Warcraft: Warlords of Draenor review in progress

We've got 100 codes for Infinite Crisis' Poison Ivy and her Autumn skin. Would you like one?

Introducing Gameport: the oddest game incubator in Europe

New phishing scam puts your beloved Steam trading cards at risk

Steam Guard phishing scam

A new phishing scam has found a way around Steam Guard, Valve has admitted. Steam Guard requires a code sent to the Steam users registered email address before it lets users on unrecognised devices access the platform. 

This scam bypasses the security completely and Steam have been warning people not to send  their SSFN files to anyone, as this is what the cheeky perpetrators have been using to access users’ libraries. 

The scam requests usernames and passwords for Steam and then tells the poor scammed sod to upload an SSFN file. The file normally resides in the Steam folder and exists to tell Steam Guard to not security check the computer. 

The file can then be used to gain access to the Steam account, since Steam Guard won’t do a security check on the computer exploiting it. This way funds can be drained from the wallet and trading cards can be sold or stolen. 

It is not, at least, possible for the scammer to purchase games, however, as that would still require bank/paypal information. 

It’s hardly elaborate and Steam details shouldn’t be given out to anyone, but people fall for obvious scams all the bleeding time. 

Cheers, Gamasutra.

Login or Register
3
+3
-0
Rob Zacny's picture
51

I shouldn't blame the victim. I really shouldn't. But ...come on.

2
+2
-0
Shriven's picture
1762

This.... This is more like Darwinism..

2
+2
-0
Belimawr's picture
488

realistically tho if this is possible it will only be a matter of time before people are incorporating sending the file over with a key logger to get the password and username.

so while it is kind of the persons fault if they fell for a phishing scam, it does also expose a massive gaping hole in the steam security.

1
+1
-0
avatar
20

Credit card information can be saved and re-used later for future purchases. Isn't it possibler phishers could use that to buy games or steam wallet funds?

Alienware - Game VictoriousTurtle Beach
World of Warcraft: Warlords of Draenor review in progress

World of Warcraft: Warlords of Draenor

World of Warcraft: Warlords of Draenor review in progress

DayZ devs tackle server performance and security ahead of Christmas break

DayZ devs tackle server performance and security ahead of Christmas break

Gearbox talk Tales from the Borderlands:

Gearbox talk Tales from the Borderlands: "We're not writing the dialogue because Telltale's better at that"

Team Fortress 2 update brings tweaks to pl_upward, improves client stability

Team Fortress 2 update brings tweaks to pl_upward, improves client stability

PayPal spills the beans on the Steam Autumn sale; starts November 26th

PayPal spills the beans on the Steam Autumn sale; starts November 26th

Telltale's Game of Thrones appears on Steam for pre-purchase; coming this December

Telltale's Game of Thrones appears on Steam for pre-purchase; coming this December

We've got 100 codes for Infinite Crisis' Poison Ivy and her Autumn skin. Would you like one?

Infinite Crisis

We've got 100 codes for Infinite Crisis' Poison Ivy and her Autumn skin. Would you like one?

Layoffs hit Double Fine as unannounced project deal falls through

Layoffs hit Double Fine as unannounced project deal falls through

Civilization Online trailer shows time-lapse of players building Paris, before nuking it

Civilization Online trailer shows time-lapse of players building Paris, before nuking it

Blizzard revert World of Warcraft dungeon loot changes after overwhelming fan feedback

Blizzard revert World of Warcraft dungeon loot changes after overwhelming fan feedback

Evolve won't charge players for its DLC maps; other DLC won't restrict matchmaking either

Evolve won't charge players for its DLC maps; other DLC won't restrict matchmaking either

The Game Awards 2014 announces fan and jury nominees and categories

The Game Awards 2014 announces fan and jury nominees and categories

Introducing Gameport: the oddest game incubator in Europe

Epigenesis

Introducing Gameport: the oddest game incubator in Europe

Chivalry isn't dead - Chivalry: Medieval Warfare is free for the weekend

Chivalry isn't dead - Chivalry: Medieval Warfare is free for the weekend

EVE Online's

EVE Online's "This is EVE" trailer uses player voice comms to capture the MMO

Metal Gear Solid 5 screenshots compare the PC and PS4 versions of Snake's bottom

Metal Gear Solid 5 screenshots compare the PC and PS4 versions of Snake's bottom

Blow up spaceships in the name of trade in Wayward Terran Frontier: Zero Falls

Blow up spaceships in the name of trade in Wayward Terran Frontier: Zero Falls

Korean RPG Lost Ark Online looks even more ambitious in the new extended trailer

Korean RPG Lost Ark Online looks even more ambitious in the new extended trailer

Skyforge is an MMO where halfway in you become a god

Skyforge

Skyforge is an MMO where halfway in you become a god

Middle-earth: Shadow of Mordor gets another free skin and a new challenge mode

Middle-earth: Shadow of Mordor gets another free skin and a new challenge mode

Dota 2 Nemesis Assassin event paints targets on hero heads

Dota 2 Nemesis Assassin event paints targets on hero heads

Frontier rethink refund policy for those that wanted an offline mode in Elite: Dangerous

Frontier rethink refund policy for those that wanted an offline mode in Elite: Dangerous

Gin and jungling: Snoop Dogg supports fan petition for Dota 2 announcer pack

Gin and jungling: Snoop Dogg supports fan petition for Dota 2 announcer pack

MiniDayZ is a free top-down fan project with the backing of Bohemia

MiniDayZ is a free top-down fan project with the backing of Bohemia