via Polygon - something I thought everyone should know about.

"In April, Malwarebytes Unpacked reported on a Steam Guard-based phishing scam that got users to enter their login information on a fake website and then manually upload the SSFN file from their computer. Once the phishers had a Steam user's login details and SSFN file, they could get around Steam Guard and access the person's account.

The phishers must not have been satisfied with the return on that method, because they're now using a simpler strategy that more people may fall victim to. A private message is sent to advertise item trading with an apparently well-stocked Steam account, and the message includes a link to a fake login page. Once the user enters their details, the page asks them to download and run an additional piece of software to complete the login process."

Full story here[www.polygon.com]