13 year old gets owned trying to hack a Steam account

Jeff7

Lifer
Jan 4, 2001
41,596
20
81
:D
I love that.
1) Tell the idiot that Valve will never ask for username and password.
2) Later, ask for the idiot's username.
3) And his password.
Both of which he provides.
He was quite cooperative for a phisher. I guess fear of losing Steam access overrides critical thinking. Snap.




that is the saddest thing ever.
But the person sems like he lernt to spell mmm good in shcool come on yeah right?
dont worry this connect it secure
 
Last edited:

IronWing

No Lifer
Jul 20, 2001
72,420
33,004
136
I was scared to allow the page to load. Anyone want to copy/paste the good parts?
 

Ns1

No Lifer
Jun 17, 2001
55,420
1,600
126
I was scared to allow the page to load. Anyone want to copy/paste the good parts?

txt

br0kenrabbit: hi
Greg_ValveOLS: good evening
br0kenrabbit: What’s ip?
br0kenrabbit: up?
Greg_ValveOLS: my name is greg a member of the valve online Support team
br0kenrabbit: On MSN?
Greg_ValveOLS: yes :)
br0kenrabbit: Why?
Greg_ValveOLS: we logged multiple ips from your account and ned to verifi your information
br0kenrabbit: My information?
Greg_ValveOLS: we believe someone may have stolen your account mmmm you havent shared youre account infomation with anyone have you?
br0kenrabbit: No. I don’t even have it written down.
Greg_ValveOLS: hmmm maybe a keylogger on you r PC then maybe you need a format?
br0kenrabbit: Well…
Greg_ValveOLS: if you can verify your account information to me i can insure that only your ip have access to it Its a new security feature were trying because this happens so muchlogin names and passwords aint safe anymroe You know. L:)
br0kenrabbit: Well
Greg_ValveOLS: dont worry this connect it secure
br0kenrabbit: Can I be honest with you, Greg?
Greg_ValveOLS: k
br0kenrabbit: Look, I don’t know how you go this MSN account name, don’t really care, either.
br0kenrabbit: Unlike you, I DO work for Valve. Trace my ip and you’ll see.
Greg_ValveOLS: huh?
Greg_ValveOLS: bs
br0kenrabbit: Trace it.
Greg_ValveOLS: how
br0kenrabbit says:Start/run/cmd type Tracert and then my IP address and hit enter.
Greg_ValveOLS: oh k
br0kenrabbit: As an employee, I know that Valve employees will NEVER contact users over MSN. I also know a valve employee will NEVER ask a user for his/her username and password.
br0kenrabbit: I’m putting a temporary hold on your Steam account.
Greg_ValveOLS: why?
br0kenrabbit: Have you read the ToS?
Greg_ValveOLS: Tod?
Greg_ValveOLS: tos
br0kenrabbit says:terms of service
Greg_ValveOLS: were?
br0kenrabbit: Greg, this is a serious infraction against the Tos. You are at risk of losing your account.
Greg_ValveOLS: why
br0kenrabbit: I just told you why
Greg_ValveOLS: :(
br0kenrabbit: I need some information from you if you want me to unlock you account. I’m going to write you up but I will only suspend you account for three days, since this is your first infraction, okay?
Greg_ValveOLS: k
br0kenrabbit says:First, what is the name the account is registered to. Not the user name, the persons real name who created the account. This is for verification purposes.
Greg_ValveOLS: xxxxx xxxxxxx
br0kenrabbit: Is this you?
Greg_ValveOLS: ya
br0kenrabbit: Are you the only user of this account?
Greg_ValveOLS: ya
br0kenrabbit: Okay, and what is the username
Greg_ValveOLS: xxxxxxxx
br0kenrabbit: Okay.
br0kenrabbit: I see you have purchased a few of our games, thank you. :)
Greg_ValveOLS: some. dude
Greg_ValveOLS: m
br0kenrabbit says:Do you always log on from the same IP?
Greg_ValveOLS: ya
br0kenrabbit says:And who is your internet providers, your ISP?
Greg_ValveOLS: xxxxxxx
br0kenrabbit says:Thank you. One moment, please, let me verify this information.
Greg_ValveOLS: am i gonna be bale to play 2nite?
br0kenrabbit: What is your city of residence?
br0kenrabbit: That depends on if you cooperate. You’re doing fine so far.
Greg_ValveOLS: xxxxxx
br0kenrabbit: Illinios?
Greg_ValveOLS: yes
br0kenrabbit: Okay. And what is the password associated with this account?
Greg_ValveOLS: xxxxxxx
br0kenrabbit: Okay. Do not try to log into steam. If you are connected now you need to log off.
Greg_ValveOLS: why
br0kenrabbit: So I can update your account.
Greg_ValveOLS: can I play 2 nite
Greg_ValveOLS: clan fight
Greg_ValveOLS: wont win without me heh
br0kenrabbit: Heh. You’ll have to wait a few minutes. Are you logged off?
Greg_ValveOLS: ya
br0kenrabbit: Okay. Give me just a moment.
br0kenrabbit: Try to log in now.
Greg_ValveOLS: k
Greg_ValveOLS: It says login failed wtf wtf!!@?
br0kenrabbit : Greg
Greg_ValveOLS: did u ban me???????????>WHY
br0kenrabbit: Greg
Greg_ValveOLS: what
br0kenrabbit: Valve will never ask for your username and password.
Greg_ValveOLS: what????
br0kenrabbit: I don’t work for Valve dude, but you just got pwnt.
Greg_ValveOLS: omg dude wtf why?
br0kenrabbit: Why were you trying to steal my account?
Greg_ValveOLS: i wanst
br0kenrabbit: Then why were you asking for my information?
Greg_ValveOLS: i was just making a joke but not cerious honest dude just give
my acount back pllllleeease i’m only 13 and save d up for like a year to buy it
br0kenrabbit: Greg
Greg_ValveOLS: dude pleas
Greg_ValveOLS: what
br0kenrabbit: Go mow some yards, bitch.
 

Red Squirrel

No Lifer
May 24, 2003
70,307
13,657
126
www.anyf.ca
Holy crap that is the most horribly designed site ever. After waiting about 10 seconds for it to load (Was about to give up, I figured it did not work because of adblock or something) I decided to run a test and did a reload. 116 requests, totalling 5.2MB. For a page that is only really text content.

But that said that was freaking hilarious! I was reading up on this physhing stuff and it is a very scary reality, these bored teens go around and try to get into random people's accounts by going in help chats and from there they can access all their other accounts too as they can just keep getting more info on the person to get other services to reset passwords. Once they get access to your email then they pretty much own your whole online life as they can password reset everything else.
 

destrekor

Lifer
Nov 18, 2005
28,799
359
126
Holy crap that is the most horribly designed site ever. After waiting about 10 seconds for it to load (Was about to give up, I figured it did not work because of adblock or something) I decided to run a test and did a reload. 116 requests, totalling 5.2MB. For a page that is only really text content.

But that said that was freaking hilarious! I was reading up on this physhing stuff and it is a very scary reality, these bored teens go around and try to get into random people's accounts by going in help chats and from there they can access all their other accounts too as they can just keep getting more info on the person to get other services to reset passwords. Once they get access to your email then they pretty much own your whole online life as they can password reset everything else.

You... have never heard of phishing before? And you work in IT?

Dude, that's scary. Phishing can be far more dangerous and exceptionally lucrative than you imagine, beyond simply being some "bored teens." Like, organized crime levels.

Phishing is basically Information Security 101.
 

Jeff7

Lifer
Jan 4, 2001
41,596
20
81
You... have never heard of phishing before? And you work in IT?

Dude, that's scary. Phishing can be far more dangerous and exceptionally lucrative than you imagine, beyond simply being some "bored teens." Like, organized crime levels.

Phishing is basically Information Security 101.
"Hey, I'm that guy who's here to do the things on the stuff. Username and password?"

"Huh? Oh, right, ok. That stuff. Here: <username and pass>"

Sometimes it's nearly that simple.
 

Red Squirrel

No Lifer
May 24, 2003
70,307
13,657
126
www.anyf.ca
You... have never heard of phishing before? And you work in IT?

Dude, that's scary. Phishing can be far more dangerous and exceptionally lucrative than you imagine, beyond simply being some "bored teens." Like, organized crime levels.

Phishing is basically Information Security 101.

Huh? o_O I never even said that.