Go Back   Steam Users' Forums > Steam Discussions > General Steam Discussion

Closed Thread
 
Thread Tools Display Modes
Old 07-06-2006, 04:33 PM   #1
Better|Off|Dead
 
Better|Off|Dead's Avatar
 
Volunteer Moderator
Join Date: Nov 2003
Reputation: 2285
Posts: 24,286
Steam Accounts - eBay, Hijacking Alerts & More

Current eBay Alerts

Warning: Do Not Purchase Steam Accounts On Ebay

There are a number of people selling Steam Accounts on eBay.

DO NOT PURCHASE THEM:
  • It is against the EULA to sell Steam Accounts
  • They are either hijacked Steam Accounts or opened with stolen credit cards.
  • The accounts will be closed and we have been informed that PayPal / eBay will NOT help since no merchandise physically changed hands.
Current Hijacking Alerts

Malicious Programs In Downloads - Added August 2006

Account holder will be contacted or see promoted a "mod" in the form of an executable file (.EXE) that is in fact malicious software designed to steal Steam account login information...

[Click Here for Details]

VALVe Employees Impersonated on Instant Message Programs
(Steam Friends, AOL IM, MSN Messenger, etc.)

People will contact account holder with display name of somename@valvesoftware.com and request Steam Account name / password to investigate an alleged cheating infraction...

[Click Here for Details]

VALVe Support Impersonated via Email

People will contacted by email requesting a Steam Account name / password to investigate a support issue - usually an alleged cheating infraction...

[Click Here for Details]

Bogus Offer to Join a HL2: Episode Two Beta

People are being contacted and offered the opportunity to participate in a Beta for Half-Life 2: Episode 2. This is a Steam Account hijacking scam...

[Click Here for Details]

Bogus Offer to Lower SteamID

Web sites exist that offer a lower SteamID in exchange for Steam Account name and user password. This is a Steam Account hijacking scam...

[Click Here for Details]

Fake Clans / Fake Clan Sites Attempting to Obtain Personal Information

VALVe have verified reports of people setting up fake clans / fake clan websites with the express purpose of stealing Steam Accounts...

[Click Here for Details]

Illegal Steam Clients & Multiplayer Game Cheats

Since illegal Steam clients are no longer working, and with the effectiveness of VAC, keyloggers and trojans designed to steal Steam Account information have been added to these applications...

[Click Here for Details]

Multiplayer Game "bot" Packs That Ask for a Steam Account Name & Password

VALVe have verified reports of bogus "bot" packs that ask for your Steam Account name and User password when you run the installer. This is a Steam Account hijacking scam...

[Click Here for Details]

Last edited by OuChTrOnX: 01-27-2007 at 07:26 PM.
Better|Off|Dead is offline  
Old 07-06-2006, 04:33 PM   #2
Better|Off|Dead
 
Better|Off|Dead's Avatar
 
Volunteer Moderator
Join Date: Nov 2003
Reputation: 2285
Posts: 24,286
Steam Accounts - eBay & Hijacking Alerts - July 2006

Malicious Programs In Downloads - Added August 2006

Method

Account holder will be contacted or see promoted a "mod" in the form of an executable file (.EXE) that is in fact malicious software designed to steal Steam account login information.

Functionality that some of these "mods" are supposed to implement are:
  • Screen Shot Functionality
  • "Bunny Hopping" Ability
Upon execution account holder may be displayed an image similar to this.

Other variations also reported.

Response

As with any other software you install on your system you should be certain of it's origin, authenticity, and intent. If you are have questions about a particular application you can contact VALVe Support and ask for assistance or post here at the forums.

Action

If you have installed an application where you are unsure of its origins or intentions you should immediately uninstall the application and try to change your password to something else.

If this fails you will need to read the following FAQs:

Reclaiming a Hijacked Steam Account
Contacting VALVe Billing and Support
Account Security Recommendations

Last edited by Better|Off|Dead: 08-08-2006 at 01:00 AM.
Better|Off|Dead is offline  
Old 07-06-2006, 04:42 PM   #3
Better|Off|Dead
 
Better|Off|Dead's Avatar
 
Volunteer Moderator
Join Date: Nov 2003
Reputation: 2285
Posts: 24,286
VALVe Employees Impersonated on Instant Message Programs
(Steam Friends, AOL IM, MSN Messenger, etc.)

Method

People will contact account holder with display name that appears support related and request Steam Account name / password to investigate an alleged cheating infraction.

Other variations also reported.

Response

VALVe will NEVER contact you in this way or request this information via "Friends" or any other IM / IRC method.

If you are contacted via "Friends" please refer to this FAQ:

Friends Security

DO NOT USE THE SAME PASSWORD FOR YOUR LOGIN TO ANY STEAM RELATED SITE AS YOU USE FOR YOUR STEAM ACCOUNT PASSWORD.

Action

If you have provided your Steam Account information to someone via "Friends" you should immediately try to change your password to something else.

If this fails you will need to read the following FAQs:

Friends Security
Reclaiming a Hijacked Steam Account
Contacting VALVe Billing and Support
Account Security Recommendations

Last edited by Better|Off|Dead: 01-02-2007 at 02:12 PM.
Better|Off|Dead is offline  
Old 07-06-2006, 04:42 PM   #4
Better|Off|Dead
 
Better|Off|Dead's Avatar
 
Volunteer Moderator
Join Date: Nov 2003
Reputation: 2285
Posts: 24,286
VALVe Support Impersonated via Email

Method

People will contacted by email requesting a Steam Account name / password to investigate a support issue - usually an alleged cheating infraction.

Example 1)
Quote:
From: Valve Support <support.steampowerd.com@gmail.com> Mailed-By: gmail.com
To: kalapadea@gmail.com
Date: Jul 4, 2006 8:31 PM
Subject: Valve Support

Recently, VAC flagged your Steam Account for a possible cheating infraction. However, the evidence provided proves inconclusive and needs further investigation. For Valve to verify your account, you will need to provide your Steam Account Username, Steam Account Password, and anytime your Steam Account may have been used by another person (Internet Cafe, LAN, Friends/Family) to eliminate this possible account suspension.

To update this question by email, please reply to this message. Because your reply will be automatically processed, you MUST enter your reply in the space below. Text entered into any other part of this message will be discarded.

[===> Please enter your reply below this line <===]

[===> Please enter your reply above this line <===]


Question Reference #021191-0372897
Category Level 1: VAC
Date Created: 7/2/2006 08:33 PM
Last Updated: 7/4/2006 3:29 PM
Status: Unresolved

Discussion Thread
JeffH
I have checked the logs and the infraction occured on July 2, 2006, however, the information that VAC logged does not have sufficient evidence, and must undergo further investigation. I cannot release much evidence, but I can tell you that it is possible that you yourself may not have cheated, but it is possible someone else who may have used your account has.

To investigate this problem, I ask you to provide the information asked above (account username, account password, and possibility of another using your account) into the spot indicated as a reply to this email. If you do not provide your information, you will be banned from VAC servers.

If you have any other questions, you can ask them in the area above this message along with your account information.

Thank you.


JeffH

Valve support
www.valvesoftware.com
Example 2)

Quote:
Dear Steam User,

We have been having recurring problems with multiple user(s)
signing on to the same account, ergo; several people using the same account
from
different IP Addresses at the same time. In order to prevent this, we are
authorizing a validation process, in which you, the contact e-mail
registered to Steam, e-mail us a code in which you authorize every time
you login to ensure that no one shares your account. To validate your
account within the next 5 days (otherwise it will be disabled), respond to
this
e-mail support-steampowered_@hotmail.com in the following format;

Username:
Password:
Code:

IMPORTANT: You must enter the above information into the Steam
application.

Signed,

{The Steam Support Team}
To contact us about this problem email support@steam-powered.com,
otherwise
respond to the e-mail above


==============
This notification has been sent to the e-mail address you provided when
you
created your Steam account. For information on Valve's privacy policy,
please
visit www.valvesoftware.com/privacy.htm
Example 3)
Quote:
Dear Steam User,

In order to continue using your current Steam account, you must
validate your authenticity by
filling out the required information in this form.
Please reply to this Email, using the current format below:

First Name: ( Your First Name )
Last Name: ( Your Last Name )
Username: ( Your Steam Account Username )
E-Mail: ( The Email Address You Registered The Account To )
Password: ( The Password You Use To Log Onto Your Steam Account )


Our database will be re-formatted soon, due to some damage caused by
destructive users. We will need to record our active users and add them
to our database once again.

You must validate your account within 30 days or, your account will be
deleted. Thank you for your co-operation, Best regards, Steam Account
Management Team.
Example 4)
Quote:
Dear Steam User.

As you can see, our mainframe servers are down or having problems.
In order for us to ensure that your account will be working without any problems we ask you to supply us with your account information.
The reply must include your username and password for the account.
Otherwise, we are afraid that we can not guarantee that your account will work.

Thank You.
SteamPowered Support.
Response

VALVe will NEVER ask you for your Steam Account name or User password via email.

DO NOT USE THE SAME PASSWORD FOR YOUR LOGIN TO ANY STEAM RELATED SITE AS YOU USE FOR YOUR STEAM ACCOUNT PASSWORD.

Action

If you have provided your Steam Account information to anyone via email you should immediately try to change your password to something else.

If this fails you will need to read the following FAQs:

Reclaiming a Hijacked Steam Account
Contacting VALVe Billing and Support
Account Security Recommendations

Last edited by Jigoku: 12-16-2006 at 02:43 PM. Reason: Added scam email related to recent power outages
Better|Off|Dead is offline  
Old 07-06-2006, 05:03 PM   #5
Better|Off|Dead
 
Better|Off|Dead's Avatar
 
Volunteer Moderator
Join Date: Nov 2003
Reputation: 2285
Posts: 24,286
Bogus Offer to Join a HL2: Episode Two Beta

Method

People are being contacted (usually via email) and offered the opportunity to participate in a Beta for Half-Life 2: Episode 2.

The offer generally comes with this image or one similar:

Image of bogus offer

The offer may request the user repond to emails such as:

steampoweredgiveaway@yahoo.com
beta@steampowered.com

Response

This is not a legitimate offer.

You can expect any Steam-related promotions to be offered through:

http://www.steampowered.com/

VALVe will NEVER contact you from or ask you to respond to a free email provider.

Action

If you have responded and provided your Steam Account information you should immediately try to change your password to something else.

If this fails you will need to read the following FAQs:

Reclaiming a Hijacked Steam Account
Contacting VALVe Billing and Support
Account Security Recommendations

Last edited by Better|Off|Dead: 07-06-2006 at 06:46 PM.
Better|Off|Dead is offline  
Old 07-06-2006, 05:32 PM   #6
Better|Off|Dead
 
Better|Off|Dead's Avatar
 
Volunteer Moderator
Join Date: Nov 2003
Reputation: 2285
Posts: 24,286
Bogus Offer to Lower SteamID

Method

Web sites exist that offer a lower SteamID in exchange for Steam Account name and user password.

Response

This is not a legitimate offer.

You cannot change your SteamID.

You can expect any Steam-related promotions to be offered through:

http://www.steampowered.com/

Action

If you have responded and provided your Steam Account information you should immediately try to change your password to something else.

If this fails you will need to read the following FAQs:

Reclaiming a Hijacked Steam Account
Contacting VALVe Billing and Support
Account Security Recommendations

Last edited by Jigoku: 07-06-2006 at 09:49 PM.
Better|Off|Dead is offline  
Old 07-06-2006, 05:50 PM   #7
Better|Off|Dead
 
Better|Off|Dead's Avatar
 
Volunteer Moderator
Join Date: Nov 2003
Reputation: 2285
Posts: 24,286
Fake Clans / Fake Clan Sites Attempting to Obtain Steam Account Information

Method

VALVe has verified reports that people are setting up fake clans and/or fake clan websites with the express purpose of stealing Steam Accounts.

1) A "member" of a fake clan will offer membership, server Admin, or web site privileges in exchange for a Steam Account name and User password.

2) Registration information from a fake clan site is used in a brute force attack on a Steam Account.

Response

Under no circumstances should a legitimate site be asking for the password to your Steam Account.

DO NOT USE THE SAME PASSWORD FOR YOUR LOGIN TO ANY STEAM RELATED SITE AS YOU USE FOR YOUR STEAM ACCOUNT PASSWORD.

Action

If you come across a site that is asking for your Steam Account User password, please report it to a forum moderator immediately.

If you have provided your Steam Account name and User password to any clan or web site you should immediately try to change your password to something else.

If this fails you will need to read the following FAQs:

Reclaiming a Hijacked Steam Account
Contacting VALVe Billing and Support
Account Security Recommendations

Last edited by Better|Off|Dead: 07-06-2006 at 06:06 PM.
Better|Off|Dead is offline  
Old 07-06-2006, 06:20 PM   #8
Better|Off|Dead
 
Better|Off|Dead's Avatar
 
Volunteer Moderator
Join Date: Nov 2003
Reputation: 2285
Posts: 24,286
Illegal Steam Clients & Multiplayer Game Cheats

Since illegal Steam clients are no longer working, and with the effectiveness of VAC, keyloggers and trojans designed to steal Steam Account information have been added to these applications.

Method

1) Applications that claim to provide free VALVe games usually contain keyloggers and trojans that steal your personal information.

2) Working multiplayer game cheats that may claim to be "VAC Proof" usually contain keyloggers and trojans that steal your personal information.

Response

Besides the obvious issue of someone stealing your personal information, use of these applications is in breach of the Steam Subscriber Agreement - you are also at risk of having your Steam Account disabled or VAC banned:

Steam Account Disabled
Valve Anti-Cheat System (VAC)

Action

Uninstall any of these applications and read the following FAQs:

Spyware, Adware, and Viruses Interfering with Steam
Reclaiming a Hijacked Steam Account
Contacting VALVe Billing and Support
Account Security Recommendations

Last edited by Lunchtimemama: 07-06-2006 at 09:24 PM.
Better|Off|Dead is offline  
Old 07-06-2006, 08:47 PM   #9
Better|Off|Dead
 
Better|Off|Dead's Avatar
 
Volunteer Moderator
Join Date: Nov 2003
Reputation: 2285
Posts: 24,286
Multiplayer Game "bot" Packs That Ask for a Steam Account Name & Password

VALVe have verified reports of bogus "bot" packs that ask for your Steam Account name and User password when you run the installer.

Method

As described above the user is challenged for a Steam Account name and User password by the application installer.

Response

This is a Steam Account hijacking scam.

Never enter your Steam account password into anything but the Steam Client login window.

Action

If you have provided your Steam Account name and User password to any applications described above try to change your password to something else.

If this fails you will need to read the following FAQs:

Reclaiming a Hijacked Steam Account
Contacting VALVe Billing and Support
Account Security Recommendations

Last edited by Better|Off|Dead: 07-06-2006 at 08:50 PM.
Better|Off|Dead is offline  
Old 03-12-2007, 04:19 PM   #10
Matt
 
Matt's Avatar
 
Volunteer Moderator - I was on TV!
Join Date: Jun 2003
Reputation: 4718
Posts: 22,912
Do not delete.

__________________
Steam Community and Forum Moderator
Have Fun!
Forum Rules: View
Matt is offline  
Old 08-28-2007, 02:20 PM   #11
Mkay
 
Join Date: Jul 2004
Reputation: 244
Posts: 1,127
Official Raise Scam Awareness Thread

Hello all .

As you may well know, the number of scams to steal steam accounts are on the rise. Heck, just check the VAC thread, you'll see a couple stories. This thread is to raise awareness and to pull the community together on the subject of scams.

How to spot scams:

-Almost 95% of scams are perpetrated using social engineering.

+ Social engineering is a collection of techniques used manipulate someone into giving away personal information.

-Usually, someone may add you to their friends list and try to contact you. If you don't know the person, don't add them.

-You may get an email stating that you have been chosen to participate in something, or that you've won something.

+100% of the time, the scam email is from an email address that isn't someone@valve.com. It's common sense, why would a multi-million dollar company use gmail.com or yahoo.com for customer support?

-Even if it looks legit....it isn't. Some scammers have been known to use names like "Automated Help" and "Steampowered Admin". They also try to impersonate VALVe employees through:

-Steam Friends
-Xfire
-Email
-AIM

THESE ARE NOT REAL VALVe employees.


And remember the golden rule: Neither VALVe nor STEAM Employees will ever ask you for your account info. Ever.



If you spot a scammer:

-Just like the rule "Don't feed the trolls", don't spam/respond to ANYONE asking for account info. Be professional and just remove/block them from your friends list. If you can, PM any one of the Forum leaders with a STEAM_ID(difficult) or friends list name of the scammer.




DO YOUR PART:


As a long-time user of Steam, I've seen many accounts fall prey to scammers. I call upon the users of this forum:

Tell everyone you know to never give out their Steam Account information.

If I need to add/edit/remove anything, feel free to post/critisize this ^.^

Last edited by Mkay: 08-28-2007 at 03:04 PM. Reason: Added Tony's comment ^.^
Mkay is offline  
Old 08-28-2007, 02:21 PM   #12
Mkay
 
Join Date: Jul 2004
Reputation: 244
Posts: 1,127
There is a sticky with all of the scams as of June 2007 I believe: http://forums.steampowered.com/forums/showthread.php?t=470929

This post will be used to describe various, current scams:




Vac-Verify scam:
The user is contacted by someone named Vac-Verify through friends. They may say something like this:

VAC-Verify says:
Hello, Could we please have a moment of your time?
Due to a recent surge within one of our steam offices we fried 3 of our 1.5TB harddrives. We've lost countless users backup details and we'd just like to verify your account credentials. Otherwise your account is marked as cracked and will be banned from VALVe Anti-Cheat (VAC). Thanks for taking your time to verify your account credentials.

Please send them in this format: USERNAME/PASSWORD/EMAIL and it will
registered within the Steam section. Visit steam support at www.steampowered.com
if you'd like to confirm via email, but those emails take up to 2 weeks to read. VAC updates hourly so you'll be risking deletion for 2 weeks. Thanks

--->Following the above post, do not reply. Block Vac-Verify instead and report the incident to a moderator using the above link in the first post.

Last edited by Mkay: 08-28-2007 at 03:11 PM.
Mkay is offline  
Old 08-28-2007, 02:31 PM   #13
Naurgul
 
Join Date: Jun 2006
Reputation: 100
Posts: 4,998
You know for a fact that Steam logs MAC address? (just curious)

Also, no point beating a dead horse; everyone in the forums knows about it. It's the random guy who runs Steam once per week to play Counter-Strike that is most likely to fall for such scams.
Naurgul is offline  
Old 08-28-2007, 02:31 PM   #14
Mkay
 
Join Date: Jul 2004
Reputation: 244
Posts: 1,127
Quote:
Originally Posted by Beer_N_Cookies View Post
I feel sorry for the kid who got his account hijecked in the VAC section. These scammers are so dumb. Steam logs the I.P. & MAC address. These guys will be found if they are reported.
I wholeheartedly agree. These guys need to be reported and b& hammer'd ASAP. MANY, and I mean MANY people are not aware of the kinds of lamers there are just waiting to steam your 400$ steam account.

No, it's not just the one guy who runs CS once a week, it's people ALL OVER. Just read through the VAC forum. A bunch of people get their accounts stolen, not to mention the people who don't even post about it.

Last edited by Mkay: 08-28-2007 at 02:34 PM.
Mkay is offline  
Closed Thread

Go Back   Steam Users' Forums > Steam Discussions > General Steam Discussion


Tags
account security

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



All times are GMT -7. The time now is 09:53 AM.


Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2014, vBulletin Solutions, Inc.
Site Content Copyright Valve Corporation 1998-2012, All Rights Reserved.