I clicked on a suspicious link so you don't have to (chronological order)

[Radolf Hortler (Real F2P)]

1) Someone unknown sent me a friend request

2) About three days after adding, he asked me to help vote for a workshop item, giving me a link with a preview that looks exactly like steam workshop item.

3) Im just bored so i opened the suspicious link. It opens on normal browser (not steam, which is another red flag), and turned out to show a workshop item for CSGo 2

4) Speaking of bored, i did a separate search on steam browser, which confirms that the workshop item is legit. However, the author is a different person

5) Everything inside the suspicious link and the steam workshop is the same.

6) However, the suspicious link contains unusual URL of "steam.workshoprequest" which is unlike the url provided by steam browser

7) Well, I went and copied that suspicious URL on website security rater and it came out to be 1/100 trust score

8) Speaking of bored, again, I tried to cast a vote for the CSgo2 workshop item on the legit link, but I can't because i dont own the game.

9) I just told the scammer what happened and he insisted on me using his link to vote.

10) the end of story, told him I have done what he asked me to (lie). Reported, and unfriended.

Hindsight:
The fake website accessed through browser did ask for me to log in on my steam account, this is probably how I get scammed, if I actually log in.

I have my steam guard up, so even if I did log in, i do think the scammers need further social engineering actually gain something. I hope.

This is the gazillionth time, a scammer pulls this ♥♥♥♥ on me. Its just that I never bothered to entertain them this far.

Alright thats it, hope i dont get hacked

[Lilim]

Originally posted by Radolf Hortler (Real F2P):

About three days after adding, he asked me to help vote for a workshop item...

There is an official support page about this scam.

Scam: Vote for My Team

Originally posted by Radolf Hortler (Real F2P):

The fake website accessed through browser did ask for me to log in on my steam account, this is probably how I get scammed, if I actually log in.

Hopefully you didn't enter your login information on that site!

If you did:

Take the following steps to secure your account:

1. Scan for malware. https://www.malwarebytes.com/
2. Check that the email and phone number on the Steam account are still yours.
3. Deauthorize all other devices. https://store.steampowered.com/twofactor/manage
4. Change passwords from a clean computer.
5. Generate new backup codes for your Mobile App. https://store.steampowered.com/twofactor/manage
6. Revoke the API key (there should be no key). https://steamcommunity.com/dev/apikey

[MonkehMaster]

i would be doing a virus/malware scan after clicking a random link, because at this point you could have something on your pc keylogging or even waiting for bank info to be used.

[TGC> The Games Collector]

Originally posted by Radolf Hortler (Real F2P):

6) However, the suspicious link contains unusual URL of "steam.workshoprequest" which is unlike the url provided by steam browser

This is why it's good for anyone on the internet to know how domain names and urls work.

Domain name layers are basically written from bottom to top.
As you can see with the link to the store page for instance : store.steampowered.com

So any domain under Steam's steampowered com
Has to be on the left side of that part, like the store.

It's good to know against phishing in general.

Another good idea is to use a sandbox browser if you want to click suspicious links. It can prevent slipping any unwanted programs through.

[Milgarugaru123]

Oh, it is nice to see a precedent of 'what I'm just on with'.
It really is helpful, thanks a lot! (even if you wrote it in boredom)
I really loathe those cheap scammers...

[yayayang]

theres also some steam.workshopunusually idk if thats a scam but it looks like

[June]

This thread was quite old before the recent post, so we're locking it to prevent confusion.