One example of phishing site
30
   
Award
Favorite
Favorited
Unfavorite
Download
"Never login from 3rd party sites, and if any site has an in webpage tab browser DO NOT PUT ANY INFO INTO IT!

If you want to ask how this works, this is their web interface javascript, basically whatever info you put, it will record, and will send a request to Steam, but your info, and ticket request will be on their server, meaning it's not on your system, it's on their system, so now they got your login details, and access, they hijack your account if they wanted, or inject API key onto your account. Be aware of these scams, do not login from 3rd party sites at all, as you never want to share login details with 3rd party ever."
6 Comments
ChristOurLife 10 Oct, 2022 @ 2:41pm 
That looks real at first glance! Thanks for the tip.
Dr.Shadowds 🐉  [author] 27 Dec, 2020 @ 10:32pm 
@Xaelath
It's not really a new method as I knew of this method for over 12 years as a javascript, this was a thing that used to target people that players for WoW, everquest, and such.

@Noble Pigeon of Beanville
You could try checking that way, but even that not good way to trust, as it shouldn't be doing a popup for this at all for starters. But yes trying to drag it outside your broswer won't happen as it will only stop at the edge soon you try, and you know right away how poorly this trick was done, but still any popup is a redflag alone when asking for sign in from 3rd party instead of giving you a one click login when already login.
Xaelath 22 Dec, 2020 @ 5:34pm 
is this a new thing?
I've never seen something so convincing yet fake
Draxuss 22 Dec, 2020 @ 4:21am 
Some people just plain suck. Thank you for the heads up.
Dom 22 Dec, 2020 @ 2:54am 
Thanks for sharing this. Very important.
The HopelessGamer™ 22 Dec, 2020 @ 1:36am 
This is really interesting. Thanks for sharing.