(adsbygoogle = window.adsbygoogle || []).push({}); Today someone on my friend's list sent me a link saying hey look at my knife. I have no idea what that meant but that's another thing. The link looked pretty obvious that it was a virus download so I clicked it and sure enough it wanted to download a file. Well I canceled out of that and did some poking around on the domain and sure enough they are taking steam account information. The weird thing is the person who wrote this up logs whenever something uploads to his server. So there is a text file on there that has the links to download this stuff.

Basically this is a program that's masked as a screen saver installer (.scr). When you run it it grabs the following:

Config Folder
2x ssfn files

I am assuming they just drop these in the steam directory and as long as the account does not have steam guard, they are able to login? I am not entirely sure about that but if they couldn't then I don't see the purpose in stealing these files.

Well I'd say it's pretty common sense except:
You must login or register to view this content.

People are falling for it

Yea if you go through the files you could figure out who it is.