Results 1 to 8 of 8

Thread: News - Scammers using new technique to bypass Valve's Steam Guard

  1. #1
    HEXUS.admin
    Join Date
    Apr 2005
    Posts
    28,217
    Thanks
    0
    Thanked
    1,845 times in 628 posts

    News - Scammers using new technique to bypass Valve's Steam Guard

    Makes use of a Steam directory SSFN file – with this anyone can bypass Steam Guard.
    Read more.

  2. #2
    Seriously casual gamer KeyboardDemon's Avatar
    Join Date
    Feb 2012
    Location
    London
    Posts
    3,013
    Thanks
    774
    Thanked
    280 times in 242 posts
    • KeyboardDemon's system
      • Motherboard:
      • Asus Sabretooth Z77
      • CPU:
      • i7 3770k + Corsair H80 (Refurbed)
      • Memory:
      • 16gb (4x4gb) Corsair Vengence Red (1866mhz) - (Because it looks good in a black mobo)
      • Storage:
      • Crucial M550 SSD 1TB + 2x 500GB Seagate HDDs
      • Graphics card(s):
      • EVGA GTX 980 SC ACX 2.0 (Warranty replacement for 780Ti SC ACX)
      • PSU:
      • EVGA 750 watt SuperNova G2
      • Case:
      • Silverstone RV03
      • Operating System:
      • Windows 10 Pro 64 Bit
      • Monitor(s):
      • Asus Swift PG278Q
      • Internet:
      • BT Infinity (40mbs dl/10mbs ul)

    Re: News - Scammers using new technique to bypass Valve's Steam Guard

    I'm surprised by this! Not that scammers have found a vulnerability, more that it has taken so long for it to happen. I know people have been tricked into giving out account details or some have had accounts hacked because they hadn't used particularly secure passwords, but scams like this one are quite a lot more sophisticated and I can see how many people would be fooled by such methods. I certainly hope Steam do more then warn users to just 'be careful' though.

  3. #3
    Registered User
    Join Date
    Dec 2013
    Posts
    2
    Thanks
    0
    Thanked
    0 times in 0 posts

    Re: News - Scammers using new technique to bypass Valve's Steam Guard

    Considering how many people get fooled by way simpler methods.. there should be way more awareness about phishing. I see a lot of people who only learn after this has happened to them.

  4. #4
    HEXUS webmaster Steve's Avatar
    Join Date
    Nov 2003
    Location
    Bristol
    Posts
    14,268
    Thanks
    286
    Thanked
    828 times in 468 posts
    • Steve's system
      • CPU:
      • Intel i3-350M 2.27GHz
      • Memory:
      • 8GiB Crucial DDR3
      • Storage:
      • 320GB HDD
      • Graphics card(s):
      • Intel HD3000
      • Operating System:
      • Ubuntu 11.10

    Re: News - Scammers using new technique to bypass Valve's Steam Guard

    Bit of a shame that the SSFN file isn't hashed against some system-unique ID.
    PHP Code:
    $s = new signature();
    $s->sarcasm()->intellect()->font('Courier New')->display(); 

  5. #5
    Registered+
    Join Date
    Nov 2012
    Location
    Burnley
    Posts
    58
    Thanks
    3
    Thanked
    1 time in 1 post
    • Heisenberg's system
      • Motherboard:
      • Gigabyte GA 970A DS3P
      • CPU:
      • AMD 8320
      • Memory:
      • 8 GB Corsair
      • Storage:
      • 1 TB WD
      • Graphics card(s):
      • 560 Ti
      • PSU:
      • 650 W XFX
      • Case:
      • Fractal R4
      • Operating System:
      • Windows 7 64 Bit
      • Monitor(s):
      • 23" AOC I2367 FH
      • Internet:
      • 160 Mb Virgin Media Broadband

    Re: News - Scammers using new technique to bypass Valve's Steam Guard

    TL;DR Don't upload your SSFN file?, I completed agree with Steve ^, this seems like such a sensitive file, Valve need to sort this.
    Last edited by Heisenberg; 18-04-2014 at 02:33 PM.

  6. #6
    Registered+
    Join Date
    Jun 2013
    Location
    Metro Manila, Paranaque City, 40 Geneva St. Bf Homes
    Posts
    43
    Thanks
    0
    Thanked
    0 times in 0 posts
    • pvee's system
      • Motherboard:
      • MSI 990 FXA-GD80
      • CPU:
      • AMD 8350FX
      • Memory:
      • 16GB (8x2) Patriot Viper 3 1600MHz Dual Channel
      • Storage:
      • 256GB OCZ Vertex 4 SSD + 2TB WD Black Caviar
      • Graphics card(s):
      • Zotac GTX 780 3gb Reference
      • PSU:
      • Corsair GS700
      • Case:
      • Corsair 600T Graphite White
      • Operating System:
      • Windows 7 Ultimate 64-bit
      • Monitor(s):
      • 27 " Asus MX279 designo series

    Re: News - Scammers using new technique to bypass Valve's Steam Guard

    now im worried coz ive been purchasing games and items under steam.

  7. #7
    Seriously casual gamer KeyboardDemon's Avatar
    Join Date
    Feb 2012
    Location
    London
    Posts
    3,013
    Thanks
    774
    Thanked
    280 times in 242 posts
    • KeyboardDemon's system
      • Motherboard:
      • Asus Sabretooth Z77
      • CPU:
      • i7 3770k + Corsair H80 (Refurbed)
      • Memory:
      • 16gb (4x4gb) Corsair Vengence Red (1866mhz) - (Because it looks good in a black mobo)
      • Storage:
      • Crucial M550 SSD 1TB + 2x 500GB Seagate HDDs
      • Graphics card(s):
      • EVGA GTX 980 SC ACX 2.0 (Warranty replacement for 780Ti SC ACX)
      • PSU:
      • EVGA 750 watt SuperNova G2
      • Case:
      • Silverstone RV03
      • Operating System:
      • Windows 10 Pro 64 Bit
      • Monitor(s):
      • Asus Swift PG278Q
      • Internet:
      • BT Infinity (40mbs dl/10mbs ul)

    Re: News - Scammers using new technique to bypass Valve's Steam Guard

    Quote Originally Posted by pvee View Post
    now im worried coz ive been purchasing games and items under steam.

    You would only have to worry if for some reason you were asked to upload your SSFN file whilst logging on as part of your Steamguard verification process. If this has never happened to you then you are not at risk, if it does happen, don't upload the requested details, without them the scammers can't access your account.

  8. #8
    Member
    Join Date
    Jan 2012
    Posts
    150
    Thanks
    0
    Thanked
    7 times in 7 posts

    Re: News - Scammers using new technique to bypass Valve's Steam Guard

    How do the scammers direct you to their phishing site? Have they somehow hijacked the Steam client? Or do they simply send e-mails that are formatted to look like the e-mails sent by Valve?

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •