WATCH OUT FOR ESC VOTING CHAT VIRUS!

[Alis]

got got with it earler because i was dumb

HOW TO IDENTIFY:
random message from a friend will start with

Yo mate
r u free rn? 

after a reply from the target it will post

 may I ask u for help? sorry for disturbing you btw 

 can u vote for my friends team and if you get into top 3 I'll drop a few keys for you as thanks for something cool? 

the compromised account will then link a phising website, under the pretense of voting for his "beast" team, clicking that link seems to have you log into steam 🚩and connect its API to vote 🚩🚩🚩🚩 once done your account is compromised, I have 2fa enabled so it seemed to have only sent the message from my account and I don't seem to have anything edited or stolen, aside from the messages.

so far I have cleared my browsing history, logged out of all other instances of steam
, revoked API access I am scanning for viruses now and I am going to change my password as soon as it comes clear, I've messaged as many friends that don't have me blocked for awareness, let me know if there is anything I'm missing to protect my account thanks

I have a screenshot ill post in the comments because I'm not sure how steam handles imgur links

[Cathulhu]

Not a virus, a simple phishing website, which you fell for.
Same as the friend you got that message from.

[Alis]

here are two instances sent from friends on discord of the compromised messages

https://i.imgur.com/jCzN073.png

https://i.imgur.com/7hl0OHg.png

always confirm shady links OUTSIDE of the chat app before clicking, both users were smarter than i was

[Aachen]

O surely focusing on specific phrasing is in no way setting oneself up for trivial counter-countermeasures.

[Alis]

Originally posted by Cathulhu:

Not a virus, a simple phishing website, which you fell for.
Same as the friend you got that message from.

yeah you are right, i wasnt really sure what to put there originally the title it a scam but i felt that wasnt right either, i ment no misinformation, only wanted to get the point accross and spread awareness, sorry bout that

[Alis]

Originally posted by Aachen:

:homelol: O surely focusing on specific phrasing is in no way setting oneself up for trivial counter-countermeasures.

Originally posted by Emma delt with hack dont click l:

here are two instances sent from friends on discord of the compromised messages

https://i.imgur.com/jCzN073.png

https://i.imgur.com/7hl0OHg.png

always confirm shady links OUTSIDE of the chat app before clicking, both users were smarter than i was

[Cathulhu]

You are aware that this scam is anything but new, right? Known for years. You are not showing us anything new.

This thread is from 2019:
https://steamcommunity.com/app/440/discussions/0/1643167006257442925/
Sound familiar?

[Aachen]

I don’t require the PSA—and if I did, I’d have been long ago been informed by the hundreds of comparable threads.

Why weren’t you? Because people mostly don’t read these things before it happens to them.

[Alis]

Originally posted by Cathulhu:

You are aware that this scam is anything but new, right? Known for years. You are not showing us anything new.

This thread is from 2019:
https://steamcommunity.com/app/440/discussions/0/1643167006257442925/
Sound familiar?

then the thread isnt for you

[Cathulhu]

Well, you didn't listen to their warning. What makes you think your thread will make a difference?

[Yzal]

Originally posted by Emma delt with hack dont click l:

Originally posted by Cathulhu:

You are aware that this scam is anything but new, right? Known for years. You are not showing us anything new.

This thread is from 2019:
https://steamcommunity.com/app/440/discussions/0/1643167006257442925/
Sound familiar?

then the thread isnt for you

This thread is for no one then, people only come here AFTER being scammed.

[TKOdarkshadow]

I got one of these a few months back, easiest way to avoid them is to just not log into random websites people hand you.

[B-o-B]

If you were not aware of the "Voting" scam then you and your friends should be made aware of the Discord scam that's going round.
Just remember and inform your friends that Valve employee's Don't use Discord for anything "Steam" related in any way.
Report anyone instantly to Discord Support the moment you hear or see the words Valve Employee.

[Muppet among Puppets]

Your account is hijacked, no matter if you use steam guard.
The details or combination of what you typed is burnt.

1. Scan for malware https://www.malwarebytes.com/
2. Deauthorize all other devices https://store.steampowered.com/twofactor/manage
3. Change passwords from a clean computer
4. Generate new backup codes https://store.steampowered.com/twofactor/manage
5. Revoke the API key https://steamcommunity.com/dev/apikey

[Overseer]

It also bothers me ever since that somebody just asks you to vote for an undisclosed third-party. Even if this would be a real vote you could question its accuracy and whole point of existence. A team that would win such a vote would win because of what exactly?
The best way to deal with such requests is to just stay away. If somebody wants you to act be lazy and forget about it.

[Cheezus Crisp]

PSAs don't work. If they did you would've seen the countless other threads from people who think they do and considered otherwise on posting.