Steam users warned to beware this dangerous phishing scam

Avoid opening any links in messages sent from unknown users

When you purchase through links on our site, we may earn an affiliate commission.Here’s how it works.

A new scam is making the rounds online that could lead toPC gamerslosing access to theirSteamaccounts or even having their devices infected withmalware.

If you’ve played an online multiplayer game before, then you’re likely familiar with skins.Skinsare fancy overlays of in-game items that are most commonly traded-in game. However, they’re also sold for either virtual or real cash online.

Valve, the company behindSteam, offers skins and other tradeable items in its own games such asCounter Strike: Global OffensiveandTeam Fortress 2though skins are also available in many of the games on its digital distribution service. As Valve launched Steam all the way back in 2003, many PC gamers have built up large libraries of games and some have even spent thousands of dollars doing so.

Now though,Malwarebytesis warning of a new scam involving skins that could result in victims losing access to their accounts and their massive library of games.

Free knife scam

According to a newblog postfrom Malwarebytes Labs, one of the oldest scams around is skin phishing in which a scammer will create a fake marketplace, an imitation of a real game-themed lounge or a fake user’s trading inventory page to carry out account compromise.

What makes this tactic so dangerous is the fact that it can be carried out in such a short time. A scammer will begin by sending a message to potential victims on Steam or Discord that contains a malicious link.

Here are just a few examples of the messages used in this latest skin phishing campaign:

Are you a pro? Subscribe to our newsletter

Sign up to the TechRadar Pro newsletter to get all the top news, opinion, features and guidance your business needs to succeed!

Once a user’s Steam account has been taken over, they’ll need to go through Steam support to try and recover it but by that time, the scammer will have likely changed their password and other login information. To make matters worse, they might even try to performidentity theftby logging into a victim’s other online accounts using their Steam credentials.

To protect yourself from this scam and others like it, Malwarebytes recommends that Steam users enable two-factor authentication (2FA) for their accounts and avoid clicking on any links from unknown users either in-game or online.

Want to protect your PC from malware? Check out our list of thebest malware removal softwareand thebest antivirus software

After working with the TechRadar Pro team for the last several years, Anthony is now the security and networking editor at Tom’s Guide where he covers everything from data breaches and ransomware gangs to the best way to cover your whole home or business with Wi-Fi. When not writing, you can find him tinkering with PCs and game consoles, managing cables and upgrading his smart home.

Phishing attacks surge in 2024 as cybercriminals adopt AI tools and multi-channel tactics

This new phishing strategy utilizes GitHub comments to distribute malware

Smeg Combi Steam Oven review: a multi-functional countertop oven that looks stunning and cooks well