http://bartblaze.blogspot.com/2014/11/malware-spreading-via-steam-chat.html

Read the details at the above link. Someone on your friends list sends you a link. Clicking it downloads a .scr file. Running this file infects you and steals your credentials.

I've had a few of my friends get hit already. So be aware.