Valve Fixes Security Flaws In Steam Community

The Steam community site was deemed unsafe due to XSS (cross-site scripting) exploit that redirect users to a fake or phishing site, and compromise Steam users account. There’s a chance that users might lose their Steam Wallet funds from this vulnerability.

valve account

A post on Steam subreddit warns users of what the exploit does and advises users against clicking on Steam profile links.

  • Redirect you to any non-steam page, for example a phishing login page. From a user perspective it is you going to a legitimate Steam profile, then you see a login page.
  • Utilize scripting to use your Steam Market funds on any item the malicious user chooses, you wouldn’t even need to confirm anything as you’re on a valid login session.
  • Manipulate elements on the page as they see fit.
Currently, there is a risk (i.e. phishing, malicious script execution, etc.) involved when viewing or simply opening PROFILE pages of other steam users as well as your OWN activity feed (both desktop and mobile versions on all browsers including steam browser/chromium),” the warning says. “I would advise against viewing suspicious profiles until further notice and disable JavaScript in your browser options. Do NOT click suspicious (real) steam profile links and Disable JavaScript on Browser.

The good news is that the issue has been fixed by Valve.

logo

Related posts

In-Depth Guide on Genshin Impact’s Watatsumi Island

In-Depth Guide on Genshin Impact’s Watatsumi Island


In-Depth Guide on Genshin Impact’s Watatsumi Island

Watatsumi Island is here, and fans of Genshin Impact are in for hours of fun with a new area to explore. The area is filled with beauty and detail, and there is an adventure for you to enjoy around every corner. But if this is your first time hearing of the island, you’re a bit...

What is Discord Nitro and How Do You Use It?

What is Discord Nitro and How Do You Use It?


What is Discord Nitro and How Do You Use It?

Have you signed up for your Discord Nitro subscription yet? If you haven't noticed, Discord offers multiple subscription options to its platform of over 150 million active users. A lot of people are seeing that their regular Discord has limitations. For gamers everywhere, Discord should ring...

How To Jungle in Mobile Legends Bang Bang

How To Jungle in Mobile Legends Bang Bang


How To Jungle in Mobile Legends Bang Bang

Mobile Legends Bang Bang is one of the leading MOBAs on the scene in 2021, and the game’s popularity is only increasing. People are logging into MLBB in record numbers to play with friends and enjoy fast games. Whether you’re trying to burst enemies down as Lunox or Lancelot, you have a...

Leave a comment