Steam guard pc code#
As an additional security measure, you’ll need to grant access to this computer by entering the special code we’ve just sent to your email address”Īt this point, the scammer would be foiled unless they also have access to the victim’s email account. “Hello! We see you’re logging in from a new computer. In the below screenshot, we’re attempting to login to a Steam Guard protected account from a new machine / IP / location / everything else:
We did some testing and can confirm that this technique – asking a victim to send their SSFN file to the scammer – does indeed work.
Steam guard pc verification#
If I delete mine, for example, I’ll have to go to my email account and dig out a brand new verification code sent to me from Steam.Īfter I’ve done this and entered the code, a brand new SSFN file is created in the Steam folder and I’m back to being protected by an additional layer of security. The SSFN file is the one that stops you from having to verify your identity through Steam Guard every time you login to Steam on your PC. Sending this file to the scammer allows them to place it into their Steam directory and login as the victim while avoiding the Steam Guard security prompt asking for a verification code sent to the email address on file. Ssfn* file contains your ID number and located in a directory Steam folder Or maybe it’s just been a while…Īs an added account security measure, you’ll need to grant access to this browser by uploading the special ssfn* file from your Steam folder… We see you’re logging in to Steam from a new browser or a new computer.
Looking very similar to the usual Steam Guard pop-up box, it says: Scammers have come up with a somewhat novel way to try and get around this security measure.Ī potential victim will navigate to the phish page and enter their Username and Password.Īt this point, they’ll be greeted with the following pop-up box:
Steam guard pc Pc#
When logging in on a PC you haven’t used before, Steam Guard will pop a window asking for a verification code which will have been sent to your email address.
Typically a Steam phish page asks for username and password, like all phish attacks – often these can be foiled by enabling Steam Guard on your account. I was digging through some recent Steam related phish pages, and came across something I haven’t seen before: a new way to steal Steam accounts while bypassing an additional security measure.
0 kommentar(er)
