1. There is no such thing as a "pending" ban or Steam admin. Anyone threatening your account is a scammer trying to scare you. Read more.

Accepted Report: 76561198080895481 - ([TF2] Team Fortress 2 Items)

Discussion in 'Archived Reports' started by MVP Again, Jan 20, 2015.

  1. MVP Again

    MVP Again New User

    Messages:
    38
    Steam:
    STEAM_0:1:48989141
    Scam Report

    Report Type: [Other] Any other fraudulant behavior
    Virtual item type involved: [TF2] Team Fortress 2 Items

    Accused profile: 76561198080895481

    Victim profile: 76561198058244011

    What happened? Description:
    Interesting new likely phishing / malware installation attempt. User added me asking if I'd like to join a competitive game with them. After agreeing, he asked if I had mumble. That was fine, up until he gave me a URL to download it which was (http://MALWARE-SUSPECTED-mumble-software-.org). It looks legit enough, but after Googling that URL, it's completely unrelated to the real mumble. So I'm almost certain this is a attempt to install malware / take over your account. It's the most creative attempt I've seen thus far, but felt the need to report it here so that no one else would fall victim to the say thing.​

    Provide Evidence:
    Interesting new likely phishing / malware installation attempt. User added me asking if I'd like to join a competitive game with them. After agreeing, he asked if I had mumble. That was fine, up until he gave me a URL to download it which was (http://MALWARE-SUSPECTED-mumble-software-.org). It looks legit enough, but after Googling that URL, it's completely unrelated to the real mumble. So I'm almost certain this is a attempt to install malware / take over your account. It's the most creative attempt I've seen thus far, but felt the need to report it here so that no one else would fall victim to the say thing.​

    Attached Files:

    • Nico.jpg
      Nico.jpg
      File size:
      149.7 KB
      Views:
      63
  2. MVP Again

    MVP Again New User

    Messages:
    38
    Steam:
    STEAM_0:1:48989141
    After I mentioned I was downloading it from the official source he signed off and removed me.
  3. darkosshear

    darkosshear New User

    Messages:
    1
    Steam:
    STEAM_0:1:63126026
    He just did the same to me. Thanks for posting this I sent him the link and he blocked me.
    MVP Again likes this.
  4. [AR] Soldier Mafia

    [AR] Soldier Mafia New User

    Messages:
    22
    Steam:
    STEAM_0:0:31616189
    He just did the same to me around 5 minuttes ago. Luckily, I do not fall for such tricks, but I could imagine someone did.
  5. Leprechaun Jack

    Leprechaun Jack New User

    Messages:
    10
    Steam:
    STEAM_0:1:64349521
    i can belive that he done the same to me
    Nico Box [Selling]: http://MALWARE-SUSPECTED-mumble-software-.org
    Leprechaun Jack: oh
    Nico Box [Selling]: server Estonia room cs2 in mumble
    Leprechaun Jack: i dont trust this site
    Nico Box [Selling]: okay download mumble in gooogle
    Nico Box [Selling]: download only 1.2.5
    Nico Box [Selling]: we are waiting you
    Leprechaun Jack: where is 1.2.5?
    Nico Box [Selling]: i gave you mumble site
    Nico Box [Selling]: where version 1.2.5
    Leprechaun Jack: uhuh
    Leprechaun Jack: my pc says its a high priority vitus and deleted it
    Leprechaun Jack: virus
    Nico Box [Selling]: hm dont lie me
    Nico Box [Selling]: )
    Nico Box [Selling]: we are using this version and from this site all right
    Leprechaun Jack: avast is warning me its a virus .-.
    Nico Box [Selling]: idk
    Nico Box [Selling]: try switch off your avast
    Leprechaun Jack: link ant working now
    Leprechaun Jack: http://gyazo.com/f75c0d101dc4ad3510ec622f7cc7b0b7
    Leprechaun Jack: see
    Nico Box [Selling]: delete this site from your black list in avast
    Nico Box [Selling]: http://MALWARE-SUSPECTED-mumble-software-.org
    Nico Box [Selling]: http://puu.sh/eQf1V/ac735296c4.jpg
  6. Nuka Cola

    Nuka Cola New User

    Messages:
    1
    Steam:
    STEAM_0:1:22864028
    Oh great... I fell for that one. This is really new, never ever expected them to become so smart. Darn.
    What did I lose? Over 5000 refineds (mostly in keys (+100x keys) and Unusuals). And pretty much whole Steam Inventory(all tradeable games, they even took some of my Cards (I dont care about those) ). Great way to lose +700$ in several minutes.
    Those bastards even disabled my Trade Email Confirmation! Grr...
    I guess all I can do is now wait and hope Valve to give back my items ;( . I dont know if I am going to get any of those back, since the Trading Email Confirmation thing was disabled (by them!).

    Phisher's profile;
    http://steamcommunity.com/profiles/76561198039993600/

    I took few pics of my lost items;
    http://gyazo.com/4ca328f94b4ed84a6a595098efe657d7
    http://gyazo.com/6fdaede25e0d47045ed916405a3b8f8d
    http://gyazo.com/90cf45ed12e0e4605ffd75a41f80b93f
    http://gyazo.com/d77ed52fbe80a0132331389c9e965be9
    http://gyazo.com/962cc3cc5d1b53cf3925a6bca04c3911
    http://gyazo.com/10f6a3a6a72496b26a2a797242b037c1
    http://gyazo.com/3eb5faed65c493ae95d92a53de7d8f45
    http://gyazo.com/4004093dcfa1b5f0b991589e0752fe71
  7. SilentReaper(SR)

    SilentReaper(SR) Retired Staff

    Messages:
    11,991
    SteamRep Admin:
    STEAM_0:0:89705646
    DO NOT POST CLICKABLE LINKS TO MALWARE.....
  8. SilentReaper(SR)

    SilentReaper(SR) Retired Staff

    Messages:
    11,991
    SteamRep Admin:
    STEAM_0:0:89705646
    As it is manual phishing, I've marked the account.