Doom dark ages playtest is a new scam going around

[eeeh]

Users send scam links that act like you are invite to playtest the game.
They send an image that looks like a notification of steam. Be careful.

[🅷🅴🆇🅴🅽]

引用自 Kronical：

So my account got compromised with sending the dark ages play test today and I have not click any phishing links for my last 2 yrs. So any solutions to fix them from logging in my account? I have over 100+ games and i dont want to abandon the account and i have Steam Guard and Auth on to protect my account and they still manage to get through...

Stop handing out your login data. Yes you did. No, it wasn't a "hacker".

[Heraclius Caesar]

引用自 ᕭᑌᑎᕬ：

引用自 Kronical：

So my account got compromised with sending the dark ages play test today and I have not click any phishing links for my last 2 yrs. So any solutions to fix them from logging in my account? I have over 100+ games and i dont want to abandon the account and i have Steam Guard and Auth on to protect my account and they still manage to get through...

Stop handing out your login data. Yes you did. No, it wasn't a "hacker".

Well said

[Kronical]

Alright well I never gave my login data to anyone whatsoever. Like I want to keep everything peaceful while keeping all my game i already bought. So I honest know what ♥♥♥♥♥♥♥♥ i click since I probably didnt want to remember it. Even so, Im for sure havent given anything to anyone in the entire time ive owns my Steam account. I would like some advice or help about my issue...

[🅷🅴🆇🅴🅽]

I wouldn't place much faith in that. For it to be true, you'd have to be an exception to the rule. A novelty. And, if we're being honest, you are anything but.

[Kronical]

In short... Y'all think I'm just a bot regardless what I say.

[Kronical]

Or just a stupid sucker who just carelessly fell for it without realizing

[Kronical]

Honestly, why do I even bother asking for help. Whatever, forget what i said cause none is going to help anyway.

[🅷🅴🆇🅴🅽]

引用自 Kronical：

Or just a stupid sucker who just carelessly fell for it without realizing

Why are you engaging in self-flagellation when nobody else even picked up a stick? No one wrote that here except you.

[Shoninya]

i have the same error.
3 days ago i got this message from someone of my community.
i didnt clicked on it and just asked him if he really has a key or if this is scam.

he didnt replied, i didnt klicked. 2 days later friends and community told me i send these messages too. how is this possible?

i didnt got a mail or a code. i have steam guard and 2fa. i directly wrote steam cause i have 500 games i do not want to loose.

i still dont know how this is possible. how can someone write in my name without i getting any note about this (mail, steam, mobile)....

please steam fix this leak. its probably on your side.

[Druxt]

Heads up ! Yesterday while scrolling on Instagram, I stumble upon a similar website, I didn't bother to check the url and gave my steam credentials, nothing happened after so I just gave up and though the website was broken
Today I checked the same website and chrome flagged it as phishing attemps, I then changed my steam creds and logged out of all devices (even though nothing seems to have happened on my account )

The domain was "THE-DARK-AGES-PLAYTEST.COM"
The weird thing is that when trying to access the fake play test it redirected me to the real steam website where my password manager recognized the domain... So I don't know how they could steal the creds...
So yes, clearly a phishing attemps and even Instagram couldnt flag it :/ stay safe slayers !

[cSg|mc-Hotsauce]

引用自 Druxt：

Heads up ! Yesterday while scrolling on Instagram, I stumble upon a similar website, I didn't bother to check the url and gave my steam credentials, nothing happened after so I just gave up and though the website was broken
Today I checked the same website and chrome flagged it as phishing attemps, I then changed my steam creds and logged out of all devices (even though nothing seems to have happened on my account )

The domain was {REDACTED}
The weird thing is that when trying to access the fake play test it redirected me to the real steam website where my password manager recognized the domain... So I don't know how they could steal the creds...
So yes, clearly a phishing attemps and even Instagram couldnt flag it :/ stay safe slayers !

It didn't redirect you to the real Steam site. It was all fake.

[Druxt]

引用自 cSg|mc-Hotsauce：

引用自 Druxt：

Heads up ! Yesterday while scrolling on Instagram, I stumble upon a similar website, I didn't bother to check the url and gave my steam credentials, nothing happened after so I just gave up and though the website was broken
Today I checked the same website and chrome flagged it as phishing attemps, I then changed my steam creds and logged out of all devices (even though nothing seems to have happened on my account )

The domain was {REDACTED}
The weird thing is that when trying to access the fake play test it redirected me to the real steam website where my password manager recognized the domain... So I don't know how they could steal the creds...
So yes, clearly a phishing attemps and even Instagram couldnt flag it :/ stay safe slayers !

It didn't redirect you to the real Steam site. It was all fake.

:nkCool:

Yeah, on top of that, I was using my phone so even harder to tell if it's suspicous.

Do you think I'm safe with what I did afterward or I should contact steam support ? Man this sucks... :/

[cSg|mc-Hotsauce]

Let's be sure. All steps...

Scan for malware. https://www.malwarebytes.com/ or with whatever.

Deauthorize all devices https://store.steampowered.com/twofactor/manage

Change your password on a secure device.

Generate new back up codes. https://store.steampowered.com/twofactor/manage

Revoke the api key (this should be empty) https://steamcommunity.com/dev/apikey