From: Stratford, Connecticut
from Yahoo News
"A new phishing scam tries to trick gamers on the Steam online video game platform into divulging their passwords — and it does so by masquerading as Steam's own security measures and tricking users into disabling the Steam app's built-in protection ... Malwarebytes reports that scammers have crafted official-looking Steam login pages that prompt users to enter their usernames and passwords. These pages are just 'phishing' or using bait to trick users into compromising themselves.
"In the usual Steam sign-in process, users would then have to enter the emailed code generated by Steam Guard. However, the scam website then asks users to upload a file from the Steam folder on their computer called a SSFN file. This file is what authorizes your computer to Steam Guard; it essentially tells Steam Guard not to demand an emailed code.
"If you upload your SSFN file, the scammers can then use it, along with the phished usernames and passwords, to access your Steam account. Once inside, the scammers can drain the account's credit as well as its virtual items and trading cards that Steam users can collect and trade. However, the scammers can't buy more video games from Steam's online store, since that would require knowing your credit card information ..."
Stratford, Connecticut, U.S.A.
"The Angel of Okinawa"
Home of the Chance-Vought Corsair, F4U
The best fighter-bomber of World War II