phishing attempts now come directly from Valve SMTP servers apparently [e-mail]

[Mr Sparkums]

Just thought I would add details about the attempt in case someone searches the supposed email address [e-mail] or smtp-04-tuk1.steampowered.com .. Clearly a phishing attempt, though it would seem directly from Valve SMTP servers..?

[e-mail]
Created at: 11/21/2024, 10:31:39 PM EST ( Delivered after 1 sec )
From: Steam Team <[e-mail]>
To: mark20**************
Subject: New sign in to Steam
SPF:
pass with IP 208.64.202.43
Learn more
DKIM:
pass with domain steampowered.com
Learn more
DMARC:
pass
Learn more

[208.78.165.207] → smtp-04-tuk1.steampowered.com
smtp-04-tuk1.steampowered.com. → [Google] mx.google.com

[ReBoot]

This stuff is easy to spoof

[Maria]

Were they able to guess your username?

[cSg|mc-Hotsauce]

Originally posted by ReBoot:

This stuff is easy to spoof

This^. It is nothing new and NOT from Valve.

[Tito Shivan]

Originally posted by Maria:

Were they able to guess your username?

This would be the deal breaker. Steam emails will call you for Steam username (NOT your profile name).
The sender on an email is a pretty easy thing to spoof