Nuclear Kangaroo Mar 5 @ 8:39pm
BEWARE FELLOW TF2 TRADERS!, there seems to be a phising epidemic happening right now
-cleaned up the OP-

First of all, id like you to redirect any new players/traders to this thread, or atleast warn em about the current threat of phishers

If you are an avid trader, you’ve probably been added by numerous people recently who greet you with the following message

"hi man, add my friend he wants to trade you

*scam link*"

If you have a reasonable amount of trading experience you probably assumed, rightfully, that this was a phishing bot, however its not so simple, if you go to the profiles of many of these people own accounts with plenty of games, playtime and full backpacks, something completely out of place for a throwaway account used for spaming phishing links

This has an explanation, when a person falls victim to this phishing scam, their accounts gets hijacked and automatically turned into another phishing bot, is like the zombie apocalypse of scams

The phishing bots check tf2outpost.com, bazaar.tf, dota2traders and possibly other sites, when people create or bump trades in those sites they bots automatically add these people and send their copy/paste message

beware of the people who add you after you bump your trades in tf2outpost.com or other trading sites

HOW IT WORKS:

if the first thing they tell you is to add a "friend" or an "alternate account" they are most likely a scammer, also check the link they give you, if the link says anything different from

http://steamcommunity.com

its a scam, the spambots will try to give you variations of this url, similar url, but never the real thing, beware, some phishing bots might even send you many messages in order to look more believable

when you see a phishing bot, report the account of "Suspected Hijacker or Phishing" and provide a screenshot or copy paste the message they sent you and let valve take the appropiate action

when you click the scam link, a FAKE steam community login page loads us, it asks you to input your password and login, now usually thanks to steamguard, this move would be completely useless, steam would simply not grand permission to the phishing bot to log in with your information from its undisclosed location, however, afterwards this fake page might ask you either one of these things

1) The page will ask you to upload a file, THIS IS HERE YOU TRUN AWAY IF YOU ALREADY HAVENT, STEAM WILL NOT ASK YOU TO UPLOAD A FILE FOR SECURITY REASONS, the file this FAKE page wants you to upload is the SSFN file of your steam installation, this is the file that lets steam know your PC is “good to go” and can be used without activating steamguard every time, theres not even the usual 7 day waiting time before trading, so at this point the phishing bot might start stealing your TF2/Dota 2/CS:GO items. once you upload the file you are practically screwed, you just gave the phishing bot the keys to your house, it can access your account any time

2) The page however could instead ask you to download a file, as an “extra security meansure”, again, TURN BACK IF YOU ALREADY HAVENT, the file it asks you to download and run is a virus, this particular virus will seek out your SSFN file and upload it to the phishing bot by itself, if you manage to recover your account after this incident remember to erase any and all traces of this virus
scammers sometimes dont wait for his victim to log out before taking control of his account, this means many times the phising bots may still be under the control of his original owner, when a phising bot adds you, send him a message, ask if theres somebody home, the original owner might still be logged in and unaware of whats happening!

IF YOU FIND A PHISHING BOT THAT IS STILL BEING USED BY HIS ORIGINAL OWNER, ALERT HIM IMMEDIATELY THAT HIS ACCOUNT IS BEING HIJACKED, AND ASK HIM TO CHANGE HIS PASSWORD AND TO NOT LOG OUT UNTIL HE DOES


new players/traders are the most susceptible to this phishing attack, unil this gets sorted out, DO NOT REDIRECT NEW PLAYERS/TRADERS TO TF2OUTPOST.COM OR OTHER AFFECTED SITES, DO NOT TELL EM TO USE THOSE SITES, OR AT THE VERY LEAST WARN EM ABOUT THESE PHISERS
Last edited by Nuclear Kangaroo; Jul 8 @ 3:50pm
Showing 1-15 of 107 comments
< >
Scootaloo (Fun Police General) (Banned) Mar 5 @ 10:57pm 
whats a phisher?
Nuclear Kangaroo Mar 5 @ 10:59pm 
Originally posted by Procrastinator Silver:
whats a phisher?

listen well my child

phishing is the act of attempting to acquire information such as usernames, passwords, and credit card details (and sometimes, indirectly, money) by masquerading as a trustworthy entity in an electronic communication.

people wanting your login and password to hijack your account
winrarphile Mar 5 @ 11:00pm 
habeeb it
Lucifer ★✬ Mar 5 @ 11:12pm 
yer, iv been gettin a few of them the in the last week.

just do what i do, report them and block them
Nuclear Kangaroo Mar 5 @ 11:13pm 
Originally posted by Lucifer ★:
yer, iv been gettin a few of them the in the last week.

just do what i do, report them and block them

its a warning, people keep falling for this
Lucifer ★✬ Mar 5 @ 11:14pm 
Originally posted by Nuclear Kangaroo:
Originally posted by Lucifer ★:
yer, iv been gettin a few of them the in the last week.

just do what i do, report them and block them

its a warning, people keep falling for this

lol yer, i allmost did the first time but when it asked me to "log back in" i knew it was a fake

we should prob post all the names of the haxers or people know who they are
Nuclear Kangaroo Mar 5 @ 11:17pm 
Originally posted by Lucifer ★:
Originally posted by Nuclear Kangaroo:

its a warning, people keep falling for this

lol yer, i allmost did the first time but when it asked me to "log back in" i knew it was a fake

we should prob post all the names of the haxers or people know who they are

read my OP, im begining to think these people are actually the previous victims of this scam, and the scammers use their accounts to phish more and more accounts

posting their names wont do much, hell it might end up giving these people a harder time once they get their accounts back
๖Machetti Mar 9 @ 1:22am 
yeah. i have been aded by something like 3 bots..
i just wanna buy few keys and everytime i bump my trade..
bot adds me..
is there any way to report them ?
» Counter-Life™ « Mar 9 @ 1:23am 
+1

You know ♥♥♥♥ is going on when 2 phishing bots add you each time you bump an unusual trade on OP.
Bradenm1 Mar 9 @ 1:24am 
I never get them
» Counter-Life™ « Mar 9 @ 1:26am 
Originally posted by Bradenm1:
I never get them :ss13ok:
Dosen't surprise me, you don't have any unusuals.
Craig (Banned) Mar 9 @ 1:31am 
One of my TF2 binds:
Hello my friend want to trade with you. Please add him here www.go♥♥♥♥yourself.com
Nuclear Kangaroo Mar 9 @ 1:40am 
Originally posted by Machetti BUYING KEYS:
yeah. i have been aded by something like 3 bots..
i just wanna buy few keys and everytime i bump my trade..
bot adds me..
is there any way to report them ?

yes, click the "more" button on their steam profile and report them for phising, keep in mind tough their accounts are most likely hijacked

Originally posted by GER Counter-Life™:
Originally posted by Bradenm1:
I never get them :ss13ok:
Dosen't surprise me, you don't have any unusuals.

i dont have either and the ♥♥♥♥♥♥♥s keep adding me
Last edited by Nuclear Kangaroo; Mar 9 @ 1:41am
Nuclear Kangaroo May 26 @ 12:39am 
bump, there have been a significant new development
Kikilicious (Banned) May 26 @ 12:48am 
Originally posted by Nuclear Kangaroo:
bump, there have been a significant new development

Don't do that, just make a new one.
Showing 1-15 of 107 comments
< >
Per page: 15 30 50