Valve Fixes Security Flaws In Steam Community

The Steam community site was deemed unsafe due to XSS (cross-site scripting) exploit that redirect users to a fake or phishing site, and compromise Steam users account. There’s a chance that users might lose their Steam Wallet funds from this vulnerability.

valve account

A post on Steam subreddit warns users of what the exploit does and advises users against clicking on Steam profile links.

  • Redirect you to any non-steam page, for example a phishing login page. From a user perspective it is you going to a legitimate Steam profile, then you see a login page.
  • Utilize scripting to use your Steam Market funds on any item the malicious user chooses, you wouldn’t even need to confirm anything as you’re on a valid login session.
  • Manipulate elements on the page as they see fit.
Currently, there is a risk (i.e. phishing, malicious script execution, etc.) involved when viewing or simply opening PROFILE pages of other steam users as well as your OWN activity feed (both desktop and mobile versions on all browsers including steam browser/chromium),” the warning says. “I would advise against viewing suspicious profiles until further notice and disable JavaScript in your browser options. Do NOT click suspicious (real) steam profile links and Disable JavaScript on Browser.

The good news is that the issue has been fixed by Valve.

Related posts

No Man’s Sky Will Have True Multiplayer On July 24

No Man's Sky Will Have True Multiplayer On July 24


No Man's Sky Will Have True Multiplayer On July 24

No Man's Sky's latest update called Next is releasing this summer. Co-founder of Hello Games, Sean Murray, announced that both the Xbox One version and Next would launch on July 24 and it is bringing true multiplayer mode with it. The Xbox version will also contain Foundation, Pathfinder...

Fortnite’s Solo Showdown Adds New Ranked Play

Fortnite’s Solo Showdown Adds New Ranked Play


Fortnite’s Solo Showdown Adds New Ranked Play

Fortnite's new Solo Showdown, is a limited time mode that will not change the battle royale gameplay of the current Solo mode and all matches will be given ranking points. Players' achievements will be placed on a leaderboard that ranks players according to their performance in their...

The Division 2 Will Launch Before April 2019

The Division 2 Will Launch Before April 2019


The Division 2 Will Launch Before April 2019

The Division 2 will launch between 2018-19 fiscal year, Ubisoft has confirmed in its latest financial report. The sequel to the online multiplayer shooter The Division was announced in March without a launch date. Although Ubisoft eventually got everything fixed and working properly for...

Leave a comment