WARNING: STEAM TROJAN SCAM

[NeatSquidYT]

So unless your e-mail was compromised, how did they get into your account and send yourself those messages?

I dunno...

[NeatSquidYT]

Enable 2-factor auth?

OK, I'll look into that

 

EDIT: Already have it

[Unknown_Guy]

OK, I'll look into that

 

EDIT: Already have it

And for gmail too?

[UselessBread]

What Steam guard thing?

This one:

That sends you mails like this one:

When you log in from a new browser/computer/device

[NeatSquidYT]

This one:

Screen shot 2015-01-02 at 12.06.13.PNG

That sends you mails like this one:

Screen shot 2015-01-02 at 12.06.51.PNG

When you log in from a new browser/computer/device

Yep

[NeatSquidYT]

And for gmail too?

Not for gmail

 

EDIT: Now I do

[WoodenMarker]

So unless your e-mail was compromised, how did they get into your account and send yourself those messages?

It spams from the friends list. 

[melias24]

yeah i've had 4 messages like that and it downloaded bloat ware and trojan horse to my PC.

[Geekazoid]

You log in from a new device, it sends you an email with a code, you enter the code onto device, and it's then authorised.

  

This one:Screen shot 2015-01-02 at 12.06.13.PNGThat sends you mails like this one:Screen shot 2015-01-02 at 12.06.51.PNGWhen you log in from a new browser/computer/device

Is that enabled with the Steam application?

[NeatSquidYT]

  

Is that enabled with the Steam application?

You right click on steam in your taskbar, go to settings, and it says there wether it's on or off, and you can enable it from there too AFAIK

[UselessBread]

It spams from the friends list.

Soo they have accounts for that sole purpose and NeatSquid would not have needed to change his password?

 

Is that enabled with the Steam application?

I can't remember what I had to do as it was back in 2012 as seen in the screenshot, but IIRC all I did was verify my e-mail address.

Oh yes, you can disable it, but won't be able to trade.

[WoodenMarker]

Soo they have accounts for that sole purpose and NeatSquid would not have needed to change his password?

Email and password should still be changed. Once you download and run the linked file, your account will spam the friends list.

[NeatSquidYT]

Email and password should still be changed. Once you download and run the linked file, your account will spam the friends list.

I'll change my email too then, right? I have a couple spare

#YouKnowWhenYoureATechieWhen

 

EDIT: Done

[UselessBread]

Email and password should still be changed. Once you download and run the linked file, your account will spam the friends list.

I don't think he ran it. Did he?

[WoodenMarker]

I don't think he ran it. Did he?

I don't think he did but it's also best to change the information to avoid additional spam. 

[NeatSquidYT]

I don't think he did but it's also best to change the information to avoid additional spam. 

I pressed "Test" instead of "Install"

[WoodenMarker]

I pressed "Test" instead of "Install"

It doesn't make a difference which you pressed in this case.

[Mush Brain]

I'm safe because i use Durex™

[Jerakl]

Nope. But there was something going around not that long ago. It took your account and proceeded to send the virus to more people. 

That happened to me and @SAV1OUR

[NeatSquidYT]

It doesn't make a difference which you pressed in this case.

I did a test on Malware Anti-Bytes and it says I'm clear, and I can't see any missing files.

[SeriouslyMikey]

That happened to me and @SAV1OUR

 

How'd you sort it? 

[WoodenMarker]

I did a test on Malware Anti-Bytes and it says I'm clear, and I can't see any missing files.

Running the program gives permission to the Steam user account details. It has to do with the account and not the system the program is run on.

[NeatSquidYT]

Running the program gives permission to the Steam user account details. It has to do with the account and not the system the program is run on.

Oh damn. I have no credit card info though

[WoodenMarker]

Oh damn. I have no credit card info though

The Steam account info is what allows them to use it to spam others. This is why your info should be changed if you ran the program.

[MadSprite]

I've had a recent Phishing Scam where a random person would add me, than after some time would send me a message about a friend trying to find me and it said here's the steam community profile link, use firefox or chrome to open and I assume it would fake a login. Looked at the link more carefully you can see it spelt community with an l. Reported the account and blocked them.