x
ETF2L is looking for new Staff to recruit! Are you interested in supporting the league? Then click here for more details on what we can offer and how to apply! 

Forum

Aware: Steam hackers active again

Created 18th July 2009 @ 14:35

Add A Reply Pages: « Previous 1 2 3

Traxantic

TLR

Point is, they give you a link, and it opens a web-browser, and it all looks EXACTLY like steam. Then you have to put in your pass and account name and voila, they have it. Just never put your pass and login in a web browser.

tragett

Point is, they give you a link, and it opens a web-browser, and it all looks EXACTLY like steam. Then you have to put in your pass and account name and voila, they have it. Just never put your pass and login in a web browser.

exactly, i click the links and write some flame in to the login thingy since my friend made one of those sites (yes he did) and he explained how it worked etc.

you can do what the shit you want with the site, as long as you dont give any correct details, there is nothing called “Hacked” only not so smart people signing up

then again, some likes to put keyloggers, scripts etc. so you get infected etc

meh, i havent lost my account yet also Squeak <3

tragett

Point is, they give you a link, and it opens a web-browser, and it all looks EXACTLY like steam. Then you have to put in your pass and account name and voila, they have it. Just never put your pass and login in a web browser.

exactly, i click the links and write some flame in to the login thingy since my friend made one of those sites (yes he did) and he explained how it worked etc.

you can do what the shit you want with the site, as long as you dont give any correct details, there is nothing called “Hacked” only not so smart people signing up

then again, some likes to put keyloggers, scripts etc. so you get infected etc

meh, i havent lost my account yet also Squeak <3

Skyride

DUCS

Point is, they give you a link, and it opens a web-browser, and it all looks EXACTLY like steam. Then you have to put in your pass and account name and voila, they have it. Just never put your pass and login in a web browser.

Not really, just look at the link. It IS different. memorise the real one and don’t click links if you aren’t sure.
http://store.steampowered.com/
there, thats the real one, the www. at the start is optional but think of it as phonetics:

steam powered . com

not really too difficult. :)

AnimaL

they should make https version for retards who cant tell difference between real deal and fraud sites

Digiwill

=[IDK]=

https://addons.mozilla.org search for “NoScript”

tnx bud

Skyride

DUCS

they should make https version for retards who cant tell difference between real deal and fraud sites

Not to bash you or anything but what difference would that make at all?

Ok, so lets say hypothetically speaking a steam Hacker. Ive just made my fake steam site in Dreamweaver, but snap! Steam has now put their site on an HTTPS server. No worries!! Lets see, open Apache config, oh! Here we go, 2 parameters in the config file and we’re done! SSL certificates cost all of about £2 one off these days so thats not an issue either, Also im sure someone who is already commiting fraud won’t mind entering false information into a signup page.

HTTPS only serves to encrypt data incase someone is snooping your connection which has absolutely nothing to do with whats going on here. :)

Personally, Im tempted to make a small site explaining the obvious things that are different (they are not pixel-perfect copies of the original site, at least not any of the ones i have seen).

Add A Reply Pages: « Previous 1 2 3