Security Bulletin: Steam Users beware of new [phishing] scams

Nerd Cave Security News for December 5th, 2019


Sophos.com posted a new security warning regarding a new Steam "phishing" scam.

Steam is a video game digital distribution service (not to be confused with STEAM Education) which allows users to purchase their favorite game titles online.  Once a title is purchased, it remains in their library for the life of the their account.

"Phishing" is an attempt by hackers to recreate a web service login, such as an online bank or other service that requires login credentials.  When the user enters their information and submits the form, the hackers then have their login credentials (more information [here]).

Apparently hackers went to considerable trouble to perfectly re-create the Steam login page, right down to the two-factor-authentication (2FA) used by Steam.com.  2FA is a means of extra-verification when you log into certain web services.  It usually consists of answering a special question or (in Steam's case) entering a special code displayed on your smartphone (more information about 2FA is available [here]).

2FA is popular among web services for maintaining security with user logins.  It wouldn't surprise me if "fake" 2FA phishing scams become more prevalent in the future.

More information about this latest Steam "phishing" scam can be found [here].

If you are in need of computer repair or maintenance, feel free to contact us at The Nerd Cave Support  [here].


Best,
Jeffrey Cobb (Owner/Operator)


Comments

Popular posts from this blog

Security Bulletin: Microsoft Patch Tuesday and Netflix Freeze scam

Wrapping up my first C# project.