Watch 20 minutes of Sherlock Holmes: Crimes and Punishments, dear Watson

Pacific Rim: Jaeger Pilot let Comic-Con attendees battle kaiju with the Oculus Rift

Lego Batman 3: Beyond Gotham's Comic-Con trailer is so good that you can forgive the duck murder

New phishing scam puts your beloved Steam trading cards at risk

Steam Guard phishing scam

A new phishing scam has found a way around Steam Guard, Valve has admitted. Steam Guard requires a code sent to the Steam users registered email address before it lets users on unrecognised devices access the platform. 

This scam bypasses the security completely and Steam have been warning people not to send  their SSFN files to anyone, as this is what the cheeky perpetrators have been using to access users’ libraries. 

The scam requests usernames and passwords for Steam and then tells the poor scammed sod to upload an SSFN file. The file normally resides in the Steam folder and exists to tell Steam Guard to not security check the computer. 

The file can then be used to gain access to the Steam account, since Steam Guard won’t do a security check on the computer exploiting it. This way funds can be drained from the wallet and trading cards can be sold or stolen. 

It is not, at least, possible for the scammer to purchase games, however, as that would still require bank/paypal information. 

It’s hardly elaborate and Steam details shouldn’t be given out to anyone, but people fall for obvious scams all the bleeding time. 

Cheers, Gamasutra.

Login or Register
3
+3
-0
Rob Zacny's picture
26

I shouldn't blame the victim. I really shouldn't. But ...come on.

2
+2
-0
Shriven's picture
1135

This.... This is more like Darwinism..

2
+2
-0
Belimawr's picture
370

realistically tho if this is possible it will only be a matter of time before people are incorporating sending the file over with a key logger to get the password and username.

so while it is kind of the persons fault if they fell for a phishing scam, it does also expose a massive gaping hole in the steam security.

1
+1
-0
avatar
15

Credit card information can be saved and re-used later for future purchases. Isn't it possibler phishers could use that to buy games or steam wallet funds?

Alienware - Game VictoriousNvidia Shield - Titanfall
We’ve 1,000 keys for a Wildstar trial account. Want one? thumbmail

Wildstar

We’ve 1,000 keys for a Wildstar trial account. Want one?

Watch 20 minutes of Sherlock Holmes: Crimes and Punishments, dear Watson thumnnail

Watch 20 minutes of Sherlock Holmes: Crimes and Punishments, dear Watson

Pacific Rim: Jaeger Pilot let Comic-Con attendees battle kaiju with the Oculus Rift thumnnail

Pacific Rim: Jaeger Pilot let Comic-Con attendees battle kaiju with the Oculus Rift

Lego Batman 3: Beyond Gotham's Comic-Con trailer is so good that you can forgive the duck murder thumnnail

Lego Batman 3: Beyond Gotham's Comic-Con trailer is so good that you can forgive the duck murder

ESPN

ESPN "delighted" by Dota 2 viewing figures; expect more eSports coverage in the future

Start building early: Landmark is on sale for the next day thumnnail

Start building early: Landmark is on sale for the next day

The Air-Raid Siren Song of War Thunder thumbmail

War Thunder

The Air-Raid Siren Song of War Thunder

AMD Gaming Evolved Client grows, adding Twitch broadcasting and other treats thumnnail

AMD Gaming Evolved Client grows, adding Twitch broadcasting and other treats

Get clued up on the history of Warcraft while you wait for Warlords of Draenor thumnnail

Get clued up on the history of Warcraft while you wait for Warlords of Draenor

Obsidian are still

Obsidian are still "really interested" in doing a Knights of the Old Republic 3

Now you Siege me: here's 36 minutes of Rainbow Six footage thumnnail

Now you Siege me: here's 36 minutes of Rainbow Six footage

Facepunch respond to Rust community ruckus, certainly

Facepunch respond to Rust community ruckus, certainly "haven't finished" development

All Keys Gone: We’ve 6,666 ArcheAge beta codes burning a hole in our hull thumbmail

ArcheAge

All Keys Gone: We’ve 6,666 ArcheAge beta codes burning a hole in our hull

Here's what BBC Newsnight made of Twitch thumnnail

Here's what BBC Newsnight made of Twitch

GTA IV iCEnhancer modder driven away by peers

GTA IV iCEnhancer modder driven away by peers "spitting on me, my work, everything"

Ubisoft reveal the

Ubisoft reveal the "worlds apart" districts of Assassin's Creed Unity's Paris

Payday: The Heist will be free on October 18th during Crimefest thumnnail

Payday: The Heist will be free on October 18th during Crimefest

Elite: Dangerous standard beta begins next week; last chance to grab lifetime expansion pack  thumnnail

Elite: Dangerous standard beta begins next week; last chance to grab lifetime expansion pack

How a quadriplegic ex-wrestler reached Gold in League of Legends thumbmail

League of Legends

How a quadriplegic ex-wrestler reached Gold in League of Legends

New Mass Effect details revealed at Comic-Con; Mako gets a facelift thumnnail

New Mass Effect details revealed at Comic-Con; Mako gets a facelift

Telltale confirms that there'll be a third season of The Walking Dead thumnnail

Telltale confirms that there'll be a third season of The Walking Dead

iCEnhancer 3.0 released for GTA 4 with a surreal launch trailer thumnnail

iCEnhancer 3.0 released for GTA 4 with a surreal launch trailer

DayZ update introduces loot persistence and improved cows thumnnail

DayZ update introduces loot persistence and improved cows