New phishing scam puts your beloved Steam trading cards at risk | PCGamesN

Strap in: the 2014 Steam Holiday Sale has officially launched; here's all the best offers

DayZ patch 0.52 adds a slew of features; includes gardening and grim suicide mechanics

WarCraft: Armies of Azeroth is a nostalgic Starcraft II mod remake of Blizzard's Warcraft III

New phishing scam puts your beloved Steam trading cards at risk

Steam Guard phishing scam

A new phishing scam has found a way around Steam Guard, Valve has admitted. Steam Guard requires a code sent to the Steam users registered email address before it lets users on unrecognised devices access the platform. 

This scam bypasses the security completely and Steam have been warning people not to send  their SSFN files to anyone, as this is what the cheeky perpetrators have been using to access users’ libraries. 

The scam requests usernames and passwords for Steam and then tells the poor scammed sod to upload an SSFN file. The file normally resides in the Steam folder and exists to tell Steam Guard to not security check the computer. 

The file can then be used to gain access to the Steam account, since Steam Guard won’t do a security check on the computer exploiting it. This way funds can be drained from the wallet and trading cards can be sold or stolen. 

It is not, at least, possible for the scammer to purchase games, however, as that would still require bank/paypal information. 

It’s hardly elaborate and Steam details shouldn’t be given out to anyone, but people fall for obvious scams all the bleeding time. 

Cheers, Gamasutra.

Login or Register
3
+3
-0
Rob Zacny's picture
53

I shouldn't blame the victim. I really shouldn't. But ...come on.

2
+2
-0
Shriven's picture
1828

This.... This is more like Darwinism..

2
+2
-0
Belimawr's picture
501

realistically tho if this is possible it will only be a matter of time before people are incorporating sending the file over with a key logger to get the password and username.

so while it is kind of the persons fault if they fell for a phishing scam, it does also expose a massive gaping hole in the steam security.

1
+1
-0
avatar
20

Credit card information can be saved and re-used later for future purchases. Isn't it possibler phishers could use that to buy games or steam wallet funds?


Alienware - Game VictoriousTurtle Beach
Strap in: the 2014 Steam Holiday Sale has officially launched; here's all the best offers

Steam

Strap in: the 2014 Steam Holiday Sale has officially launched; here's all the best offers

DayZ patch 0.52 adds a slew of features; includes gardening and grim suicide mechanics

DayZ patch 0.52 adds a slew of features; includes gardening and grim suicide mechanics

WarCraft: Armies of Azeroth is a nostalgic Starcraft II mod remake of Blizzard's Warcraft III

WarCraft: Armies of Azeroth is a nostalgic Starcraft II mod remake of Blizzard's Warcraft III

Respawn's Vince Zampella says future titles might not be Origin exclusive; teases non-Titanfall game

Respawn's Vince Zampella says future titles might not be Origin exclusive; teases non-Titanfall game

Assetto Corsa races out of Steam Early Access with version 1.0

Assetto Corsa races out of Steam Early Access with version 1.0

Call of Duty: Advanced Warfare teases mechanised zombies in new Havoc DLC trailer

Call of Duty: Advanced Warfare teases mechanised zombies in new Havoc DLC trailer

Port Review - Metal Gear Solid 5: Ground Zeroes

Metal Gear Solid 5: Ground Zeroes

Port Review - Metal Gear Solid 5: Ground Zeroes

Sign up to the Armored Warfare beta, and get your very own handsome tank commander

Sign up to the Armored Warfare beta, and get your very own handsome tank commander

Slave revolution sparks civil war inside Elite: Dangerous; escalates to massive capital ship warfare

Slave revolution sparks civil war inside Elite: Dangerous; escalates to massive capital ship warfare

Blizzard to consider in-game subscription time item for World of Warcraft

Blizzard to consider in-game subscription time item for World of Warcraft

StarCraft II ladder players will dive into a new map pool in 2015

StarCraft II ladder players will dive into a new map pool in 2015

Trials Fusion will take Uplayers for a free multiplayer spin this weekend

Trials Fusion will take Uplayers for a free multiplayer spin this weekend

The 15 best space games on PC

15 best PC space games

The 15 best space games on PC

Let's take a second to appreciate that Mojang made an announcement within a text adventure

Let's take a second to appreciate that Mojang made an announcement within a text adventure

Have you seen it? Evolve trailer shows off the Wraith, an invisible boss monster

Have you seen it? Evolve trailer shows off the Wraith, an invisible boss monster

Chris Roberts sends congrats to Braben on Elite: Dangerous launch, plays down rivalry

Chris Roberts sends congrats to Braben on Elite: Dangerous launch, plays down rivalry

Notch just bought a house

Notch just bought a house

Legacy of the Void: how Blizzard are building a beta StarCraft II with

Legacy of the Void: how Blizzard are building a beta StarCraft II with "meaningful" upgrades

The 100 Best Minecraft Skins

Minecraft

The 100 Best Minecraft Skins

Minecraft 1.8.2 pre-released with altered explosion physics and better performance

Minecraft 1.8.2 pre-released with altered explosion physics and better performance

Far Cry 4's

Far Cry 4's "Escape from Durgesh Prison" DLC to hit in January; will feature perma-death

Hotline Miami 2: Wrong Number committed to a 2015 release; also coming in vinyl form

Hotline Miami 2: Wrong Number committed to a 2015 release; also coming in vinyl form

Evolve demonstrates new

Evolve demonstrates new "Wraith" monster with an interactive trailer

Planetside 2 update adds activatable knives and spitfire auto-turrets for engineers

Planetside 2 update adds activatable knives and spitfire auto-turrets for engineers