A word of warning to our loyal readers here. There is a new phishing scam out there targeting Steam users. Why do you need to worry about this one? Because they've engineered the scam to make you think you're making your account more secure. And by that, we do mean social engineering.
The scam works the way it usually does. You’ll get a message from a stranger about a ‘friend’ who wants to trade with you. That message will also come with a list of items for different games that they promise to give you. One should not that some or all of these items won’t actually exist in the game.
Previous scams would make a fake Steam Guard Box, then ask you to manually send them your SSFN file. Now, however, they claim to be sending you Steam Guard to download and install, and so you will need to give it permission to get your information.
That fake Steam Guard file will find your Steam folder and copy your SSFN file. From then, the phisher will freely access your account.
What’s extra insidious is how it pretends to be doing this to protect your account. As always, you need to be wary of strangers offering you candy, but if you need more details, you can get it here.