Quick summary: Scammers have recreated a large amount of trading websites. When you click on the "Sign in through Steam" button they recreated a fake login page. When you enter your info it's sent to the hacker and logs you into Steam. The hacker will not steal your items right away. Instead they get your Steam API key. They can use this to accept (but not confirm), decline and cancel trade offers. When you send a trade to someone, or someone sends you a trade offer, the scammer can decline that trade and then send a new trade to it's scam account.


For full break down and how to secure your account: Click Here


Stay safe,

Fire.