I clicked a link and it sends automatic messages to all your friends.

[76561198057715242]

This is my very first post on the forums, so please excuse me if I put the thread into a wrong category.

I've recently received a message from a friend on a Steam application private chat. I don't remember what it was exactly saying, but something about I should check something out and a link. I opened the link (which I'm not going to post here for obvious reasons) and it redirected me to a page where it let me download an .scr file (Windows screensaver) - “knife.scr” to be precise. I became a little suspicious, but was naive enough to actually run the file. It appeared that it was not a screensaver at all (despite the extension) and it automatically opened new chat windows to each and everyone I had on my friend list and sent to all of them a message with same link without my agreement! Though this time saying something like “Check it out” or so and the link. I, of course, notified everyone from my friend list about what actually happened and what this link actually is.

I personally believe this is an important issue, since it is a direct threat to Steam's defenses as it allows a free access to one's Steam application interface without their supervision. I don't think it was anything more than just a joke, spreading through the chat windows. Nevertheless I reinstalled Steam, scanned the system with an anti-virus and changed my account's password just in case this was a possible attempt to mass hack Steam accounts.

Please help spread the knowledge of this incident. Let people be aware of the danger.

[WhereIsBusmin]

Yes.... On the first page of the Help and Tips sub-forum alone:

http://steamcommunity.com/discussions/forum/1/624075036304419752/

http://steamcommunity.com/discussions/forum/1/624075036303843531/

http://steamcommunity.com/discussions/forum/1/624075036307035991/

http://steamcommunity.com/discussions/forum/1/624075036306071682/

http://steamcommunity.com/discussions/forum/1/624075036305756678/

[Marble]

.SCR, or "screensaver" extensions have been a common container for viruses for decades.

Personally, I would nuke your entire Windows installation and install fresh to make sure you're not infected, since you gave it permission to run you have no idea what it has done or what it might still be doing.

What malware you install on your system is not Valve's responsibility.

[76561198057715242]

Originally posted by L-r | Canti:

.SCR, or "screensaver" extensions have been a common container for viruses for decades.

Personally, I would nuke your entire Windows installation and install fresh to make sure you're not infected, since you gave it permission to run you have no idea what it has done or what it might still be doing.

What malware you install on your system is not Valve's responsibility.

I actually did nuke it. I think it was a very good idea. No signs of anything suspicious so far, so I believe I got rid of it.

[76561198057715242]

Originally posted by WhereIsBusmin:

Yes.... On the first page of the Help and Tips sub-forum alone:

http://steamcommunity.com/discussions/forum/1/624075036304419752/

http://steamcommunity.com/discussions/forum/1/624075036303843531/

http://steamcommunity.com/discussions/forum/1/624075036307035991/

http://steamcommunity.com/discussions/forum/1/624075036306071682/

http://steamcommunity.com/discussions/forum/1/624075036305756678/

Thanks for the links. They were very usefull.

[b a r r a t h i e l]

yeah this happens to me right now

[Andrew Tate]

https://gleam.io/ymLkB/giveway-dead-island-epidemic
GIVEWAY !

[Cathulhu]

Wow, a giveaway for a game that was shut down last year.

[TomboyLover]

Hi, does someone here knows how i can warn all my contacts about a scam message? i have more than 100 friends on steam, and it will be hard to message them 1 by 1

[cSg|mc-Hotsauce]

Originally posted by DontUseThatLinkGotScamed:

Hi, does someone here knows how i can warn all my contacts about a scam message? i have more than 100 friends on steam, and it will be hard to message them 1 by 1

1 by 1

[ELmalo99]

It's happening again. Please help

[Wolf Knight]

Originally posted by ELmalo99:

It's happening again. Please help

1. Scan for malware https://www.malwarebytes.com/
2. Deauthorize all other devices https://store.steampowered.com/twofactor/manage
3. Change passwords from a clean computer
4. Generate new backup codes for your Mobile App
5. Revoke the API key https://steamcommunity.com/dev/apikey (there should be nothing in the APIKEY)