New(?) phishing scam targeting competitive players

#1

brody

0 Frags – +

Not sure if this is new or not, but I hadn't seen it before

At least this lets us know comp tf2 isn't dead, right?

Not sure if this is new or not, but I hadn't seen it before

http://pastebin.com/mAtB5J1J

At least this lets us know comp tf2 isn't dead, right?

#2

spammyh

1 Frags – +

Yeah, I had the same. Some no name guy added me saying "You"re really good, can we talk in %obviously not phishing link to download a program% like right now?"
Remove and block - is the way to go.

#3

Bonafide

-3 Frags – +

http://tm-call.com/ (no you won't get a virus by just clicking this link)
Seems trustworthy

))

http://tm-call.com/ (no you won't get a virus by just clicking this link)
Seems trustworthy

))

#4

T0m

3 Frags – +

Did you hear what theyve said about you on the forums?
Please click this legit link that doesn't look dodgy as fuck whatsoever.

#5

Bonafide

-4 Frags – +

T0mDid you hear what theyve said about you on the forums?
Please click this legit link that doesn't look dodgy as fuck whatsoever.

I know some people don't like me, that doesn't mean I'd spread viruses.

[quote=T0m]Did you hear what theyve said about you on the forums?
Please click this legit link that doesn't look dodgy as fuck whatsoever.[/quote]
I know some people don't like me, that doesn't mean I'd spread viruses.

#6

PootisPootisPootisPootis

2 Frags – +

File name: installer.exe
Detection ratio: 1 / 54
ESET-NOD32 a variant of MSIL/Stimilik.V (steals sensitive info from steam)
https://www.virustotal.com/en/file/1fc787ce5a7c153ee848b3e858a1e8580b3f2d8166a42ca09e8a4c1414a11d12/analysis/

#7

jk_

5 Frags – +

http://i.imgur.com/DtYqgo4.png

[img]http://i.imgur.com/DtYqgo4.png[/img]

#8

Hergan

0 Frags – +

jk_http://i.imgur.com/DtYqgo4.png

Yea, this one...

I'm just removing those comments, cuz why would I want them

[quote=jk_][img]http://i.imgur.com/DtYqgo4.png[/img][/quote]

Yea, this one...

I'm just removing those comments, cuz why would I want them

#9

jk_

2 Frags – +

Hergan5jk_http://i.imgur.com/DtYqgo4.png
Yea, this one...

I'm just removing those comments, cuz why would I want them

what makes it funnier is that they were all posted on the same day

[quote=Hergan5][quote=jk_][img]http://i.imgur.com/DtYqgo4.png[/img][/quote]

Yea, this one...

I'm just removing those comments, cuz why would I want them[/quote]
what makes it funnier is that they were all posted on the same day

#10

CHERRY

0 Frags – +

fatswimdudeNot sure if this is new or not, but I hadn't seen it before

http://pastebin.com/mAtB5J1J

At least this lets us know comp tf2 isn't dead, right?

How do they expect anyone to fall for that if they can't even speak english?
Seriously if you're going to write a "phishing bot" get a friend to help you with language stuff.

[quote=fatswimdude]Not sure if this is new or not, but I hadn't seen it before

http://pastebin.com/mAtB5J1J

At least this lets us know comp tf2 isn't dead, right?[/quote]
How do they expect anyone to fall for that if they can't even speak english?
Seriously if you're going to write a "phishing bot" get a friend to help you with language stuff.

#11

CHERRY

0 Frags – +

Btw. try this: https://github.com/Kuba77/SteamWall

#12

Shoosh

0 Frags – +

i got a new one the other day also, sent in a steam email. Gonna post it here to show, sorry for the wall of text.

First of all im going to be referencing to screenshots alot throughout this post so here is the imgur album that ill be referencing:

http://imgur.com/4QpJSnU,bGMrhr6,hPj8Qd6,ITuZRzQ,YnC22RC,kvBZxkL,OwVWWBH,omuw6W5,3B6c0St,ThJguMn,Nop1fO3,gF3DK0d

I got added at around 20:00 GMT on the 20/12/2014 by a guy called Superman's briefs ( http://steamcommunity.com/id/mrwooper/ ). He added me asking if I wanted to trade my unusual for keys. He acted normal but i knew he was instantly fishy as he didnt have any hours in the game.

He then asked me to trade my unusual to a trusted friend so he could "see" if it was duped. (which isnt how you check) but i continued to play along for the sake of seeing how this "works". [See image 1,2 and 3 on the imgur album]

So after I traded my hat to my trusted friend (http://steamcommunity.com/id/royalnipple) who ive known for 3 years (bearing in mind we were in mumble at the time he was attempting to scam me). He started speaking to my friend [See screenshots 10,11 and 12].

The tactic was that that scammer had a friend rename himself and change his picture to the same as mine and would invite his scammer friend into a chat with my "trusted friend" to try and trick said trusted friend into trading the hat back to whom he thought it would be me. [See screenshot 6, 7 and 8]

So it goes:
Scammer A adds me
Scammer A asks me to trade my hat to Trusted Friend to check dupes
Scammer A gets Scammer B to change his name and avatar to Victims
Scammer A invites Scammer B into a chat with Trusted Friend
Trusted Friend trades hat to Scammer B because he thinks its the Victim but isnt.

So yeah.

Steam Profiles:
Me: http://steamcommunity.com/id/shoooosh [Victim]
Royal Nipple: http://steamcommunity.com/id/royalnipple [Trusted Friend]
Supermans Briefs: http://steamcommunity.com/id/mrwooper/ [Scammer A]
(insert alias here): http://steamcommunity.com/profiles/76561198090909780 [Scammer B]

Hope this was clear enough and I hope it gets investigated. :)
Just to be clear I still have my hat, no items were lost.

i got a new one the other day also, sent in a steam email. Gonna post it here to show, sorry for the wall of text.

First of all im going to be referencing to screenshots alot throughout this post so here is the imgur album that ill be referencing:

http://imgur.com/4QpJSnU,bGMrhr6,hPj8Qd6,ITuZRzQ,YnC22RC,kvBZxkL,OwVWWBH,omuw6W5,3B6c0St,ThJguMn,Nop1fO3,gF3DK0d

I got added at around 20:00 GMT on the 20/12/2014 by a guy called Superman's briefs ( http://steamcommunity.com/id/mrwooper/ ). He added me asking if I wanted to trade my unusual for keys. He acted normal but i knew he was instantly fishy as he didnt have any hours in the game.

He then asked me to trade my unusual to a trusted friend so he could "see" if it was duped. (which isnt how you check) but i continued to play along for the sake of seeing how this "works". [See image 1,2 and 3 on the imgur album]

So after I traded my hat to my trusted friend (http://steamcommunity.com/id/royalnipple) who ive known for 3 years (bearing in mind we were in mumble at the time he was attempting to scam me). He started speaking to my friend [See screenshots 10,11 and 12].

The tactic was that that scammer had a friend rename himself and change his picture to the same as mine and would invite his scammer friend into a chat with my "trusted friend" to try and trick said trusted friend into trading the hat back to whom he thought it would be me. [See screenshot 6, 7 and 8]

So it goes:
Scammer A adds me
Scammer A asks me to trade my hat to Trusted Friend to check dupes
Scammer A gets Scammer B to change his name and avatar to Victims
Scammer A invites Scammer B into a chat with Trusted Friend
Trusted Friend trades hat to Scammer B because he thinks its the Victim but isnt.

So yeah.

Steam Profiles:
Me: http://steamcommunity.com/id/shoooosh [Victim]
Royal Nipple: http://steamcommunity.com/id/royalnipple [Trusted Friend]
Supermans Briefs: http://steamcommunity.com/id/mrwooper/ [Scammer A]
(insert alias here): http://steamcommunity.com/profiles/76561198090909780 [Scammer B]

Hope this was clear enough and I hope it gets investigated. :)
Just to be clear I still have my hat, no items were lost.

#13

BlazePhoenix

2 Frags – +

^isnt this fairly old? I got this one a few months ago

#14

FiZZiL

0 Frags – +

Shooshi got a new one the other day also, sent in a steam email. Gonna post it here to show, sorry for the wall of text.

First of all im going to be referencing to screenshots alot throughout this post so here is the imgur album that ill be referencing:

http://imgur.com/4QpJSnU,bGMrhr6,hPj8Qd6,ITuZRzQ,YnC22RC,kvBZxkL,OwVWWBH,omuw6W5,3B6c0St,ThJguMn,Nop1fO3,gF3DK0d

I got added at around 20:00 GMT on the 20/12/2014 by a guy called Superman's briefs ( http://steamcommunity.com/id/mrwooper/ ). He added me asking if I wanted to trade my unusual for keys. He acted normal but i knew he was instantly fishy as he didnt have any hours in the game.

He then asked me to trade my unusual to a trusted friend so he could "see" if it was duped. (which isnt how you check) but i continued to play along for the sake of seeing how this "works". [See image 1,2 and 3 on the imgur album]

So after I traded my hat to my trusted friend (http://steamcommunity.com/id/royalnipple) who ive known for 3 years (bearing in mind we were in mumble at the time he was attempting to scam me). He started speaking to my friend [See screenshots 10,11 and 12].

The tactic was that that scammer had a friend rename himself and change his picture to the same as mine and would invite his scammer friend into a chat with my "trusted friend" to try and trick said trusted friend into trading the hat back to whom he thought it would be me. [See screenshot 6, 7 and 8]

So it goes:
Scammer A adds me
Scammer A asks me to trade my hat to Trusted Friend to check dupes
Scammer A gets Scammer B to change his name and avatar to Victims
Scammer A invites Scammer B into a chat with Trusted Friend
Trusted Friend trades hat to Scammer B because he thinks its the Victim but isnt.

So yeah.

Steam Profiles:
Me: http://steamcommunity.com/id/shoooosh [Victim]
Royal Nipple: http://steamcommunity.com/id/royalnipple [Trusted Friend]
Supermans Briefs: http://steamcommunity.com/id/mrwooper/ [Scammer A]
(insert alias here): http://steamcommunity.com/profiles/76561198090909780 [Scammer B]

Hope this was clear enough and I hope it gets investigated. :)
Just to be clear I still have my hat, no items were lost.

Same thing happened to me yesterday, some guy added me and he had a respectable profile ( steam lvl 5, a few paid games, ~100 friends)

rundown of the conversation:
http://pastebin.com/DNs3q87V

Hopefully people are aware of this kind of thing, there's not much valve can do that it hasn't done already.

[quote=Shoosh]i got a new one the other day also, sent in a steam email. Gonna post it here to show, sorry for the wall of text.

First of all im going to be referencing to screenshots alot throughout this post so here is the imgur album that ill be referencing:

http://imgur.com/4QpJSnU,bGMrhr6,hPj8Qd6,ITuZRzQ,YnC22RC,kvBZxkL,OwVWWBH,omuw6W5,3B6c0St,ThJguMn,Nop1fO3,gF3DK0d

I got added at around 20:00 GMT on the 20/12/2014 by a guy called Superman's briefs ( http://steamcommunity.com/id/mrwooper/ ). He added me asking if I wanted to trade my unusual for keys. He acted normal but i knew he was instantly fishy as he didnt have any hours in the game.

He then asked me to trade my unusual to a trusted friend so he could "see" if it was duped. (which isnt how you check) but i continued to play along for the sake of seeing how this "works". [See image 1,2 and 3 on the imgur album]

So after I traded my hat to my trusted friend (http://steamcommunity.com/id/royalnipple) who ive known for 3 years (bearing in mind we were in mumble at the time he was attempting to scam me). He started speaking to my friend [See screenshots 10,11 and 12].

The tactic was that that scammer had a friend rename himself and change his picture to the same as mine and would invite his scammer friend into a chat with my "trusted friend" to try and trick said trusted friend into trading the hat back to whom he thought it would be me. [See screenshot 6, 7 and 8]

So it goes:
Scammer A adds me
Scammer A asks me to trade my hat to Trusted Friend to check dupes
Scammer A gets Scammer B to change his name and avatar to Victims
Scammer A invites Scammer B into a chat with Trusted Friend
Trusted Friend trades hat to Scammer B because he thinks its the Victim but isnt.

So yeah.

Steam Profiles:
Me: http://steamcommunity.com/id/shoooosh [Victim]
Royal Nipple: http://steamcommunity.com/id/royalnipple [Trusted Friend]
Supermans Briefs: http://steamcommunity.com/id/mrwooper/ [Scammer A]
(insert alias here): http://steamcommunity.com/profiles/76561198090909780 [Scammer B]

Hope this was clear enough and I hope it gets investigated. :)
Just to be clear I still have my hat, no items were lost.[/quote]

Same thing happened to me yesterday, some guy added me and he had a respectable profile ( steam lvl 5, a few paid games, ~100 friends)

rundown of the conversation:
http://pastebin.com/DNs3q87V

Hopefully people are aware of this kind of thing, there's not much valve can do that it hasn't done already.