Is it safe to sign into sites through steam?

[zwill]

Is it safe to sign into sites?

[Cathulhu]

What sites?

[Washell]

As long as you make sure it's not a fake login window, yes.

The easiest way to check that is to login through your browser on steam itself. If the site then still makes a login window pop up, it's fake.

[zwill]

Originally posted by Cathulhu:

What sites?

cs money and different sites

[Dr.Shadowds 🐉]

Originally posted by TOXINLV:

Originally posted by Cathulhu:

What sites?

cs money and different sites

No. This what I suggest you do, go directly to Steam itself, login, now visit the site, if it asks you for login info, it a phishing site because you're already login on Steam, it shouldn't be asking for your login, if it gives a single green button for sign in with no login information requirement that means you don't see username, and password bars, then it fine. Fyi there scam sites that con people into trading their items to someone to using their service/site, so be aware of said scams, there no reason needing a middle man ever as we have trade offers on Steam itself as the person can just send you offer, and all have to do is accept the offer if you agreed to it that it, that why no need for middleman trade at all.

I leave copy, and paste quote for anyone that need help learn more about phishing attacks, and scams that been commonly happening on the internet.

Originally posted by Dr.Shadowds 🐉:

Here are the most common reason people get accounts hijack for any service really are as followed.
- Sharing account infomation with others. <--- Very common with impersonators, pretending to be Steam admin / support.
- Logging in on phishing sites. <--- Very common with skin gambling sites.
- Downloading / Installing Virus / Keylogger on your system.
- Using public devices that has keyloggers, such as cyber cafe, school computers, and etc...
- Storing your login credentials on a unsecured service that others has access to view.
- Using same login credentials for all your things, or using same login credentials on another service that had a data leak. Yes it does matter because even if it not related to Steam, if using same login credentials, hijackers will try to use those credentials to see what services you use with those credentials. https://haveibeenpwned.com/

https://youtu.be/9TRR6lHviQc

The type of story scammers say to you.

- "Hey vote for my team", and they link you a phishing site link, and try get you to login.

- "Hey I can't add you, please add me", and they try to start their scam with you.

- If you're friend with someone that got their account hijacked, you get scam message like, "I report you", "you been banned", and whatever to try scare you, and they tell you to trade your items to them, or if you have a login to phishing site may have a API key on account that redirect trades, they ask you to give them money, or etc...

- If you already got your account compromise by them, they change your display name to banned, or whatever, your display picture as well, they may delete your friends, and try to spend your wallet funds if you have any, also trade all your items, but if they see if you have mobile authenticator attached, they play their scam to get you to confirm the trade to get your items off your account to their account quicker if they're able to trick you into confirming the trade.


I show you few examples.
https://steamcommunity.com/sharedfiles/filedetails/?id=2329645315
https://steamcommunity.com/sharedfiles/filedetails/?id=2570975058

https://youtu.be/JuWHCBeZrqI
https://www.youtube.com/watch?v=kook1DlxDAw
https://www.youtube.com/watch?v=0DDnV-MHSaY
https://www.youtube.com/watch?v=WfTXxLraokE

https://steamcommunity.com/discussions/forum/1/4956744526904317093/#c4956744526904653890

[м]

Originally posted by TOXINLV:

Originally posted by Cathulhu:

What sites?

cs money and different sites

cs money is a scam website, you shouldn't login there at all.

[zwill]

Originally posted by м:

Originally posted by TOXINLV:

cs money and different sites

cs money is a scam website, you shouldn't login there at all.

joke?

[м]

Originally posted by TOXINLV:

joke?

No. gamble and trading sites like csmoney are all scam, just take a look into the forums for how many people lost their stuff or access to their accounts after a while.

Same goes for ♥♥♥♥♥♥♥♥♥, keydrop, ♥♥♥♥♥♥♥♥♥, ♥♥♥♥♥♥♥♥ and all the other junk sites.

Totally not worth the risk.

[ReBoot]

Rule of thumb: easy gains don't exist. if a site is advertised with very much that, they got a scheme going on and that scheme consists of enriching it's perpetrators, not you.

[Jack Schitt]

Sharing our account or using [this] login [there] is never safe.

I can't recommend using your Steam login for anything at all other than Steam and don't allow any other site to tie it self to your account.

Especially with Counter Stike, TF2, or discord. Surf these forums and look at all the topics about someone getting scammed, their CS and/or TF2 items getting stolen and/or their account hijacked or all of that happens to the same person at the same time. Almost all of them come from Counter Strike or Discord and it happens sometimes without the victim doing anything other than attaching a 3rd party site to their account.

Therr are ways to use 3rd party sites with other accounts that already exist safely but in general it's not safe to do. If we do decide to do that we have to take steps to prevent thise things from happening like being sure to log out of thise other places when we're not using them (which really isn't much help. If your login's there your login's there, someone can get it if they want it.)

The best prevention is to avoid putting ourselves in the position where these things can happen to us. We open the door for it to happen when we use our Steam login somewhere else or allow a site access with an API key.

If you decide to do it please be aware you are taking a risk, putting yourself in a place where it can possibly happen.

[nullable]

Originally posted by TOXINLV:

Originally posted by м:

cs money is a scam website, you shouldn't login there at all.

joke?

It's not.

A great many scam and hijack victims are actively using those sites. And people who don't because they recognize them as being dangerous don't have problems with their account security (at anywhere close to the same pace)

Could be coincidental, could be the sort of people using those sites are universally more careless and reckless with their accounts.

My belief is they skim off top. Users provide their account info to the sites, and the sites loot a couple hundred accounts at a time. A tiny fraction of the whole. Not enough to raise alarms about the site. Most of the users can confidently claim they've used the site for ages without a problem. As a result more people join because people think it's safe to do so, because "everyone" says it is.

And people can't seem to fathom that doing a dangerous thing for months doesn't make it safe or secure...

It would be a great way to run a long term scam, which is the point, a nice sustainable income.

Users have no idea what happened, so half of them are convinced Steam must be at fault. And even if they blame the trading site, who's going to listen to them? Or if they use multiple trading sites, "which one?"

[zwill]

Originally posted by Snakub Plissken:

Originally posted by TOXINLV:

joke?

It's not.

A great many scam and hijack victims are actively using those sites. And people who don't because they recognize them as being dangerous don't have problems with their account security (at anywhere close to the same pace)

Could be coincidental, could be the sort of people using those sites are universally more careless and reckless with their accounts.

My belief is they skim off top. Users provide their account info to the sites, and the sites loot a couple hundred accounts at a time. A tiny fraction of the whole. Not enough to raise alarms about the site. Most of the users can confidently claim they've used the site for ages without a problem. As a result more people join because people think it's safe to do so, because "everyone" says it is.

And people can't seem to fathom that doing a dangerous thing for months doesn't make it safe or secure...

It would be a great way to run a long term scam, which is the point, a nice sustainable income.

Users have no idea what happened, so half of them are convinced Steam must be at fault. And even if they blame the trading site, who's going to listen to them? Or if they use multiple trading sites, "which one?"

ok thx for info

[Jack Schitt]

As a former web developer I know how easy it is to include a line of code that harvests, saves, and does whatever the author wants with any info users submit. After such a code is online the author doesn't have to do much of anything other than watch what it grabs and pick and choose what to take advantage of.

It seems if Valve stopped allowing off-steam trading maybe that would secure it a lot more?

Does Steam's system not have a feature the trading sites have? Why do people even use them?

Is it just people not knowing and they get had because they don't know or their desire for an item offered outweighs the flag alarms?

Why hasn't this stuff been stopped yet? It's been going on since CS (and TF2) had trading systems. 20+ years.

[ElvisDeadly]

Originally posted by Jack Schitt:

It seems if Valve stopped allowing off-steam trading maybe that would secure it a lot more?
.

Valve tells users 100% to not get involved in offsite trading, they tell them it isn't in any way supported and they warn you to not agree to any trades outside of the the trade window.

How exactly do you suggest they STOP it?

[Jack Schitt]

So it's users putting them selves in position despite warnings (they probably don't bother reading). It makes sense why Vavle doesn't return stolen items when it happens then.

It's been so long I've been avoiding that game because of this stuff I don't remember how the store and trading works. I've glanced on outside CS store sites and see they sell items somehow. Is it possible to trade outside of steam or are the 3rd party trading sites just ads and they have to do the trade on Steam?

[Pscht]

They promise real money. Which means, the user clicks "yes, this is a gift" and is then surprised that the other side doesn't keep their promise and comes here to beg for their items back. No idea how it works the other way, if the user wants an item and pays money.