New phishing types?

Beware of this. Their profile is private and want you to look in their inventory. They then link you to a fake profile.

Not sure if this has been seen before, but I haven't seen it before

I've seen a similar phishing approach. A person who doesn't even have you added, messages you with something along the lines of
"Hey my friend wants to buy your stuff, add him at www.phishinglinknotsteamcommunity.com"

It's utterly ridiculous the amount of those I've received in the past three, four days. Obviously I just report them to Valve, but I think I've received six or seven attempts.

They use SteamBot, which isn't limited to the less then 50 rule the steam client imposes on messaging ppl in groups. They use via SteamBot the large groups ppl are member of to target the members of that group with such messages.

Hidden Content:

**Hidden Content: Content of this hidden block can only be seen by members of (usergroups: Administrative, Moderating, SteamRep Partner Members, SteamRep Partner SCAs).**

This has been going on since ever. Nothing new.

How is it that when I get home from work everyday I have about 10-40 messages from Phishers. Sometimes the same guy like 10 messages over and over. I don't even have them added.

Just got a new phishing type. Well new to me. Somebody left a comment with a drop box url. I went onto the profile and some guy commented saying he clicked it and downloaded a trojan on accident... Watch out for this stuff.

Wow phishers are getting desperate if their now restoring to trojans

Not really knew, happens often.

People need to exercise common sense and caution when clicking on links, sites and the etc.

As for the comments, Valve has made improvements to Steam regarding this. If the URL is not an official Steam website, you will be able to see the domain in the brackets.

The same happens with the summary.

Not much of an improvement.
Hmm, I wonder how many people would be phished if Valve gave a warning message if the site is unofficial, and would not open the link at all.
It's one thing to ignore the warning message, but to actually go to the site by typing it in is really major stupidity.

There is no limit to that, you know that. Look up the Darwin Awards....

Well, the problem is. They can do anything with links. They can use a drop box which is an official website. Or they can make up a new website and just say check this out blah blah blah. There is no way steam can moderate that. I think that with the phishing Valve needs to implement a new feature that if in chat or comment or what have you, that you get a steancommunity or whatever these phishers use to trick you into thinking it is a real steam site, it should say next to it in big red this is not an official valve site.

They can use a url shortener site, which forward them to another site... and you're no closer knowing where you're going.

That doesn't always happen. For example, in my profile, it does NOT do that for both Twitter and Youtube links.

Pic:

I guess there are some requirements... Once the URL meets them, it is displayed without the domain in the brackets.

Think they have a whitelist.