New phishing scam puts your beloved Steam trading cards at risk | PCGamesN

This War of Mine paid off its own development costs in just two days

A weird Dragon Age: Inquisition bug is making party members shy

Counter-Strike: Global Offensive pros tussle over $250,000 at DreamHack Winter

New phishing scam puts your beloved Steam trading cards at risk

Steam Guard phishing scam

A new phishing scam has found a way around Steam Guard, Valve has admitted. Steam Guard requires a code sent to the Steam users registered email address before it lets users on unrecognised devices access the platform. 

This scam bypasses the security completely and Steam have been warning people not to send  their SSFN files to anyone, as this is what the cheeky perpetrators have been using to access users’ libraries. 

The scam requests usernames and passwords for Steam and then tells the poor scammed sod to upload an SSFN file. The file normally resides in the Steam folder and exists to tell Steam Guard to not security check the computer. 

The file can then be used to gain access to the Steam account, since Steam Guard won’t do a security check on the computer exploiting it. This way funds can be drained from the wallet and trading cards can be sold or stolen. 

It is not, at least, possible for the scammer to purchase games, however, as that would still require bank/paypal information. 

It’s hardly elaborate and Steam details shouldn’t be given out to anyone, but people fall for obvious scams all the bleeding time. 

Cheers, Gamasutra.

Login or Register
3
+3
-0
Rob Zacny's picture
53

I shouldn't blame the victim. I really shouldn't. But ...come on.

2
+2
-0
Shriven's picture
1771

This.... This is more like Darwinism..

2
+2
-0
Belimawr's picture
493

realistically tho if this is possible it will only be a matter of time before people are incorporating sending the file over with a key logger to get the password and username.

so while it is kind of the persons fault if they fell for a phishing scam, it does also expose a massive gaping hole in the steam security.

1
+1
-0
avatar
20

Credit card information can be saved and re-used later for future purchases. Isn't it possibler phishers could use that to buy games or steam wallet funds?

Alienware - Game VictoriousTurtle Beach
World of Tanks Stronghold guide: why you’re going to need a mighty clan

World of Tanks

World of Tanks Stronghold guide: why you’re going to need a mighty clan

This War of Mine paid off its own development costs in just two days

This War of Mine paid off its own development costs in just two days

A weird Dragon Age: Inquisition bug is making party members shy

A weird Dragon Age: Inquisition bug is making party members shy

Counter-Strike: Global Offensive pros tussle over $250,000 at DreamHack Winter

Counter-Strike: Global Offensive pros tussle over $250,000 at DreamHack Winter

Metal Gear Online to return alongside The Phantom Pain

Metal Gear Online to return alongside The Phantom Pain

Cubism: Tate gallery make Minecraft maps of some of history's best-loved paintings

Cubism: Tate gallery make Minecraft maps of some of history's best-loved paintings

The best PC gaming Black Friday sales

Sales

The best PC gaming Black Friday sales

Get covered in Grey Goo on January 23rd

Get covered in Grey Goo on January 23rd

Call of Duty: Advanced Warfare is getting super zombies with the Havoc DLC next year

Call of Duty: Advanced Warfare is getting super zombies with the Havoc DLC next year

DayZ's 2015 roadmap has been revealed; final version will release in the first half of 2016

DayZ's 2015 roadmap has been revealed; final version will release in the first half of 2016

Mea culpa: Ubisoft offers free DLC to Assassin's Creed Unity players and a free game to season pass holders

Mea culpa: Ubisoft offers free DLC to Assassin's Creed Unity players and a free game to season pass holders

Youtubers told to flag promotional videos by ASA. All thanks to biscuits

Youtubers told to flag promotional videos by ASA. All thanks to biscuits

The 20 best strategy games on PC

20 Best Strategy Games

The 20 best strategy games on PC

Gigantic trailer reveals MOBA where your ancient is a giant, angry monster

Gigantic trailer reveals MOBA where your ancient is a giant, angry monster

Dark Souls: Prepare to Die will excise GFWL in December, not November

Dark Souls: Prepare to Die will excise GFWL in December, not November

Runescape's subscription cost is rising for all new members

Runescape's subscription cost is rising for all new members

Assassin’s Creed Unity patch fixes more than 300 bugs

Assassin’s Creed Unity patch fixes more than 300 bugs

Humble Bundle boosts Insurgency’s player numbers to more than a million

Humble Bundle boosts Insurgency’s player numbers to more than a million

Crookz is a disco-themed heist simulator

Crookz

Crookz is a disco-themed heist simulator

Rek'Sai is League of Legends' newest champion; she's underground, so you've probably never heard of her

Rek'Sai is League of Legends' newest champion; she's underground, so you've probably never heard of her

Solve your own nautical murder in Why Am I Dead At Sea

Solve your own nautical murder in Why Am I Dead At Sea

Distance, the neon-soaked survival racer, is launching on Steam Early Access next month

Distance, the neon-soaked survival racer, is launching on Steam Early Access next month

Good news, everyone: The World of Warcraft Blood Elf makeover is in progress

Good news, everyone: The World of Warcraft Blood Elf makeover is in progress

Batman and his best bud head to Ace Chemicals in new Arkham Knight footage

Batman and his best bud head to Ace Chemicals in new Arkham Knight footage