Phony My Team Voice App Being Spread on Steam Chat

Steam Account Phishers Caught Squatting

Steam’s Summer Sale officially concluded Sunday. This, however, did not deter scammers from continuing to target users with accounts on Valve’s popular gaming platform.

Steam users may think the screenshot below was taken from the default community page, I would have agreed if the URL on the address bar isn’t actually sleamcummunity(dot)com.

Fake Steam Community page

The scammer/s behind this fake domain changed “t” to “l” (small L) and “o” to “u”. This is an example of a type of online threat we call typosquatting.

Clicking the “Sign in” button or the “Login” link at the upper right corner of the page directs users to the phishing page, which is a pixel-by-pixel copy of the legitimate one:

Fake Steam sign in page

click to enlarge

After doing a simple WHOIS lookup, we have determined that the fake domain was registered recently and is hosted in Russia.

Dear Reader, please do keep a sharp eye on your browser address bar whenever you’re surfing online.

Also, when you type domain URLs into it (if you haven’t bookmarked them yet), make sure you key in the URLs correctly before hitting Enter.

Jovi Umawing


Jovi Umawing

Knows a bit about everything and a lot about several somethings. Writes about those somethings, usually in long-form.