[Master]

I was contacted by someone (a bot) named Erüdo. He seemed legit at first, I play a csgo match with him, so I accepted his friend request. I saw Erüdo send me a message with a link to a file called Image_xxx.scr. I quickly looked up scams and such that can be seen on Steam, and I became aware of phishing, thanks to an article linked.

If I opened this file, the following tasks would have been performed:

• Retrieves the current session ID of my Steam user account.
  
• Gains access to my’s inventory / backpack.
  
• Saves items onto an “offer list” for selling.
  
• Displays an image in order to make me believe that what I actually opened is indeed an image file and not an actual application
  

I unfriend him and report it to Steam.

Article