For the past few days I've been getting messages from someone I don't know via the Steam messenger; if you get one you will see a message like the one below:
If you follow the link provided it will take you to what looks remarkably like a Steam page. However, there are two things that should strike you as suspicious immediately (well, three if you think about the unsolicited message) the web address for one isn't your usual Steam address i.e:
Steams usual address is:
http://store.steampowered.com/
whereas the address of the seemingly real Steam page will look like the following (though each day they used a different address):
gMobin.ir/steampower-free_games.com/
and
redking.ir/steampower-free_games.com/
Also Steam would not ask for your personal details like they are doing on this page.
Before I had time to send the sender a message they had already gone offline. In fact each time I've seen it pop up they immediately go offline once they have delivered the message.
They are offering the folowing games (see image below)if you tick the like on their web page, though you do have to give them your Steam password and email. Likely story. If you give them the above details they will hope that your Steam password is the same as your email password so they can then hijack your steam account. That's all they need to firstly change the account password then the name. you need your Steam email to verify such changes.
I don't know how easy it would be to recover your account if you did lose it this way.