New phishing scam puts your beloved Steam trading cards at risk | PCGamesN

Blizzard to reveal remaining Blackrock Mountain Hearthstone cards on stream tomorrow

HTC Vive Developer Edition will be free to developers "big or small" says Valve

Dark Souls II: Scholar of the First Sin pricing detailed; $19.99 for owners of original game and DLC

New phishing scam puts your beloved Steam trading cards at risk

Steam Guard phishing scam

A new phishing scam has found a way around Steam Guard, Valve has admitted. Steam Guard requires a code sent to the Steam users registered email address before it lets users on unrecognised devices access the platform. 

This scam bypasses the security completely and Steam have been warning people not to send  their SSFN files to anyone, as this is what the cheeky perpetrators have been using to access users’ libraries. 

The scam requests usernames and passwords for Steam and then tells the poor scammed sod to upload an SSFN file. The file normally resides in the Steam folder and exists to tell Steam Guard to not security check the computer. 

The file can then be used to gain access to the Steam account, since Steam Guard won’t do a security check on the computer exploiting it. This way funds can be drained from the wallet and trading cards can be sold or stolen. 

It is not, at least, possible for the scammer to purchase games, however, as that would still require bank/paypal information. 

It’s hardly elaborate and Steam details shouldn’t be given out to anyone, but people fall for obvious scams all the bleeding time. 

Cheers, Gamasutra.

Login or Register
3
+3
-0
Rob Zacny's picture
67

I shouldn't blame the victim. I really shouldn't. But ...come on.

2
+2
-0
Shriven's picture
2185

This.... This is more like Darwinism..

2
+2
-0
Belimawr's picture
597

realistically tho if this is possible it will only be a matter of time before people are incorporating sending the file over with a key logger to get the password and username.

so while it is kind of the persons fault if they fell for a phishing scam, it does also expose a massive gaping hole in the steam security.

1
+1
-0
avatar
24

Credit card information can be saved and re-used later for future purchases. Isn't it possibler phishers could use that to buy games or steam wallet funds?

Try these free to play games
?

These are affiliate links - clicking them and playing the games directly supports PCGamesN

Spotlight
?

Our Spotlight units plug content our journalists have made, that our advertisers want to promote. Sometimes the promotion is paid for, but the content they go to is always independent with no client oversight or approval.


Alienware - Game VictoriousTurtle Beach
Weekend Deal Dump: 2K and Sega fight to the death

Weekend Deal Dump

Weekend Deal Dump: 2K and Sega fight to the death

Blizzard to reveal remaining Blackrock Mountain Hearthstone cards on stream tomorrow

Blizzard to reveal remaining Blackrock Mountain Hearthstone cards on stream tomorrow

HTC Vive Developer Edition will be free to developers

HTC Vive Developer Edition will be free to developers "big or small" says Valve

Dark Souls II: Scholar of the First Sin pricing detailed; $19.99 for owners of original game and DLC

Dark Souls II: Scholar of the First Sin pricing detailed; $19.99 for owners of original game and DLC

The Typing of The Dead: Overkill gets custom dictionaries via Steamworks

The Typing of The Dead: Overkill gets custom dictionaries via Steamworks

Batman: Arkham Knight on PC will only be released digitally in the UK

Batman: Arkham Knight on PC will only be released digitally in the UK

Ashes of the Singularity is an RTS where getting across the largest map takes an hour

Ashes of the Singularity

Ashes of the Singularity is an RTS where getting across the largest map takes an hour

Battlefield 4 Spring Update adds Gun Master game mode and a new weapons crate

Battlefield 4 Spring Update adds Gun Master game mode and a new weapons crate

Sword Coast Legends' party of adventurers finally face the Dungeon Master

Sword Coast Legends' party of adventurers finally face the Dungeon Master

Elite: Dangerous is putting on an in-game scavenger hunt for Nvidia Titan Blacks

Elite: Dangerous is putting on an in-game scavenger hunt for Nvidia Titan Blacks

Hearthstone: Blackrock Mountain: all the spoiled cards so far

Hearthstone: Blackrock Mountain: all the spoiled cards so far

Oculus VR's chief scientist is a big fan of The Matrix and that's scary for many reasons

Oculus VR's chief scientist is a big fan of The Matrix and that's scary for many reasons

Having Lots of Sex With Men in Videogames: Part Two

Coming Out On Top

Having Lots of Sex With Men in Videogames: Part Two

Hearthstone's Blackrock Mountain expansion launches next week

Hearthstone's Blackrock Mountain expansion launches next week

The 20 best RPGs on PC

The 20 best RPGs on PC

Galactic Civilization 3's beta 5 update adds space bugs from the future and pirates

Galactic Civilization 3's beta 5 update adds space bugs from the future and pirates

Tights at the ready: Infinite Crisis launches on Steam

Tights at the ready: Infinite Crisis launches on Steam

Codemasters announce F1 2015, throw-in the 2014 season... almost like F1 2014 never happened

Codemasters announce F1 2015, throw-in the 2014 season... almost like F1 2014 never happened

The 101 Best Free PC Games

Free games

The 101 Best Free PC Games

Pillars of Eternity is out now, so here's a dramatic launch trailer

Pillars of Eternity is out now, so here's a dramatic launch trailer

Half-Life 2 is getting a community-made patch tomorrow; updates visuals and squashes bugs

Half-Life 2 is getting a community-made patch tomorrow; updates visuals and squashes bugs

Alienware Alpha review: why you should wait for the real Steam Machine

Alienware Alpha review: why you should wait for the real Steam Machine

Hands on with the Dirty Bomb closed beta

Hands on with the Dirty Bomb closed beta

GOG reaffirms their refund policy:

GOG reaffirms their refund policy: "Hitting 'Buy' doesn't waive your rights"