Russian Site Stealing People's Accounts

[Typhonica]

Hi, I just wanted to post a quick warning here about something that recently happened to me and some people I know. If you get a message from a friend telling you to go to a website called xrollsdatgame, don't let the https in front of it fool you. I (stupidly in my part) clicked on the link and had my account stolen.
Later a friend I was talking to in real life told me I was sending them the same link even though I was no longer connected to the account, and that it was being repeatedly sent to them every now and then when they failed to respond.
So yeah, everyone who reads this has been warned.

[B-o-B]

No inventory.

Scan for Malware/virus https://www.malwarebytes.com/mwb-download/
Deauthorize all devices https://store.steampowered.com/twofactor/manage
Change your Account password on a secure device.
Generate new back up codes.
Revoke the API key https://steamcommunity.com/dev/apikey
Stop logging into 3rd party sites please.

[Crazy Tiger]

Warnings don't help. Otherwise you would have known to not click on random links.

[Typhonica]

Yep, done done and done. On my part I recognize it wasn't that smart to follow that link, but for the friend who sent it to me it didn't seem that far-fetched, which is why I followed the link even though I really knew better.
Thanks for the recommendations though. Apparently malwarebytes is really good because you're the third person who's recommended it to me.

[Crazy Tiger]

It's a quite thorough program, yes.

[Mr ♥♥♥♥♥♥♥♥.com]

I just got back my robbed account 3 days before... I will never ever put my password anywhere !!

[Crono]

No offense, but it doesn't take a high IQ to recognize that the site has to be a scam. Come on "free games" even though they are rather new. Just learn from the experience and never trust a deal that looks too good unconditionally.

[Typhonica]

Yeah, duly noted. Looking back on it I can't believe I actually clicked on the link. If it hadn't been for the specific friend who sent it, I wouldn't have trusted it t all. I have definitely learned my lesson

[Crono]

Sometimes I wish there was a steam group with a few thousand or ten thousand people that flames these scam sites with fake account information.

[Crono]

Originally posted by Storm Dragon:

Yeah, duly noted. Looking back on it I can't believe I actually clicked on the link. If it hadn't been for the specific friend who sent it, I wouldn't have trusted it t all. I have definitely learned my lesson

Yes malwarebyte's is great. Also download their "adwarecleaner". It is free and searcher for PUP (potentially unwanted programs). let it run through your system once, I use it on regular basis.

[Typhonica]

Originally posted by Zero:

Originally posted by Storm Dragon:

Yeah, duly noted. Looking back on it I can't believe I actually clicked on the link. If it hadn't been for the specific friend who sent it, I wouldn't have trusted it t all. I have definitely learned my lesson

Yes malwarebyte's is great. Also download their "adwarecleaner". It is free and searcher for PUP (potentially unwanted programs). let it run through your system once, I use it on regular basis.

Thanks, I'll keep it in mind

[Rens Agatha ⁧【レンス】]

this will happen when you trust "Russian Site"....

[ShelLuser]

Originally posted by Storm Dragon:

Yep, done done and done. On my part I recognize it wasn't that smart to follow that link, but for the friend who sent it to me it didn't seem that far-fetched, which is why I followed the link even though I really knew better.

Following the link is not a problem at all.

Actually trying to log onto such weird sites even though you get about a dozen official warnings not to do that (you know: the bright yellow box when you follow a link on Steam?).... That is a huge problem because then you're basically giving your account away.

Always keep in mind that if a site provides legit ways to log onto their site using Steam then you won't have to provide any username or password if you're already logged on (which most of us are anyway through the Steam client). The best you get is a redirect to the Steam / Valve website where you'll see your Steam username (the real one) and a question if you really want to use that to log on.

You click 'Yes', you're taken back, and you're logged on.

Anything that actually asks you for a username and password is fake, fake, fake.

[Plλyer]

I got same message from my friend http://prntscr.com/nqk2sg

[cSg|mc-Hotsauce]

Originally posted by JustWatch ム:

I got same message from my friend http://prntscr.com/nqk2sg

A Green Light dev.

Report his account for being compromised.

[Muppet among Puppets]

Originally posted by ShelLuser:

Actually trying to log onto such weird sites even though you get about a dozen official warnings not to do that (you know: the bright yellow box when you follow a link on Steam?)

That is not in the way at all.
Of course the site is not meant to be mismatched with steam.......

You click the known button for login with steam, and that next page looks normal, no warning, and you are good to....... no, you are not,

but you get the idea how the warning does nothing.