Valve Fixes Security Flaws In Steam Community

The Steam community site was deemed unsafe due to XSS (cross-site scripting) exploit that redirect users to a fake or phishing site, and compromise Steam users account. There’s a chance that users might lose their Steam Wallet funds from this vulnerability.

valve account

A post on Steam subreddit warns users of what the exploit does and advises users against clicking on Steam profile links.

  • Redirect you to any non-steam page, for example a phishing login page. From a user perspective it is you going to a legitimate Steam profile, then you see a login page.
  • Utilize scripting to use your Steam Market funds on any item the malicious user chooses, you wouldn’t even need to confirm anything as you’re on a valid login session.
  • Manipulate elements on the page as they see fit.
Currently, there is a risk (i.e. phishing, malicious script execution, etc.) involved when viewing or simply opening PROFILE pages of other steam users as well as your OWN activity feed (both desktop and mobile versions on all browsers including steam browser/chromium),” the warning says. “I would advise against viewing suspicious profiles until further notice and disable JavaScript in your browser options. Do NOT click suspicious (real) steam profile links and Disable JavaScript on Browser.

The good news is that the issue has been fixed by Valve.

logo

Related posts

Nintendo Indie World Showcase | 5.11.2022

Nintendo Indie World Showcase | 5.11.2022


Nintendo Indie World Showcase | 5.11.2022

Check out a selection of indie games from around the world coming to Nintendo Switch in the latest Indie World Showcase! For more information: Indie World Showcase Intro Ooblets Batora: Lost Haven ElecHead Soundfall Wildfrost Totally Accurate Battle...

OffGamers 游戏节 – 春天气息之游戏 (第二轮)

OffGamers 游戏节 - 春天气息之游戏 (第二轮)


OffGamers 游戏节 - 春天气息之游戏 (第二轮)

春天已经到来,我们才刚刚开始玩所有这些您可以享受的精彩游戏!坐下来,放松一下,让游戏给你带来春天。 塞尔达传说 旷野之息 (发布日期: 2017年 03月 03日) 视频来源:YouTube 该作故事发生在海拉鲁王国灭亡的一百年后,玩家扮演的林克在地下遗迹苏醒,但却失去了一切记忆,耳边时而响起既熟悉又陌生的声音,指引着林克开始了新的冒险之旅。林克只得在冒险中重拾记忆并最终去完成属于自己一百年前的使命。   相关链接: The Legend of Zelda: Breath of the Wild (NS)...

Splatoon 2: Octo Expansion DLC added as Nintendo Switch Online + Expansion Pack benefit!

Splatoon 2: Octo Expansion DLC added as Nintendo Switch Online + Expansion Pack benefit!


Splatoon 2: Octo Expansion DLC added as Nintendo Switch Online + Expansion Pack benefit!

Nintendo Switch Online + Expansion Pack members just got a new benefit! Starting today, members can access the Splatoon™ 2: Octo Expansion DLC* at no additional cost. With the Splatoon™ 3 game on the horizon, this single-player DLC is the perfect way to get in some practice before you take...