Valve Fixes Security Flaws In Steam Community

The Steam community site was deemed unsafe due to XSS (cross-site scripting) exploit that redirect users to a fake or phishing site, and compromise Steam users account. There’s a chance that users might lose their Steam Wallet funds from this vulnerability.

valve account

A post on Steam subreddit warns users of what the exploit does and advises users against clicking on Steam profile links.

  • Redirect you to any non-steam page, for example a phishing login page. From a user perspective it is you going to a legitimate Steam profile, then you see a login page.
  • Utilize scripting to use your Steam Market funds on any item the malicious user chooses, you wouldn’t even need to confirm anything as you’re on a valid login session.
  • Manipulate elements on the page as they see fit.
Currently, there is a risk (i.e. phishing, malicious script execution, etc.) involved when viewing or simply opening PROFILE pages of other steam users as well as your OWN activity feed (both desktop and mobile versions on all browsers including steam browser/chromium),” the warning says. “I would advise against viewing suspicious profiles until further notice and disable JavaScript in your browser options. Do NOT click suspicious (real) steam profile links and Disable JavaScript on Browser.

The good news is that the issue has been fixed by Valve.

Related posts

Battlefield 1: Apocalypse DLC Arrives in February

Battlefield 1: Apocalypse DLC Arrives in February


Battlefield 1: Apocalypse DLC Arrives in February

Battlefield 1: Apocalypse will launch in February for Premium Pass holders. This latest expansion features some of the most iconic battlefields of World War 1. The game's new Apocalypse DLC main highlight is the brand new Air Assault mode, where dogfights and airships are catered to...

Overwatch’s New Patch Adds New Skins From Blizzard’s Universe

Overwatch's New Patch Adds New Skins From Blizzard's Universe


Overwatch's New Patch Adds New Skins From Blizzard's Universe

At Blizzcon last year, Blizzard revealed eight legendary skins, such as Nova outfit for Widowmaker, Butcher skin for Roadhog, Sonya's outfit for Zarya and more will probably be added into the loot box. Starting next week, Pharah is the first hero to get a new cosmetic rework. Players...

Nintendo Labo Announced For The Switch

Nintendo Labo Announced For The Switch


Nintendo Labo Announced For The Switch

Nintendo revealed today the Nintendo Labo, that involve DIY custom-made cardboard projects which change the Switch's Joy-Con controllers into a piano, to a motorbike, a robot, fishing rod and more. Once the accessories are assembled, they can be used to control the mini-games loaded onto a...

Leave a comment