Accepted 76561198129932218 (LurkMoar)

Accused:
| steamname: LurkMoar
| steam3ID: [U:1:169666490]
| steamID32: STEAM_0:0:84833245
| steamID64: http://steamcommunity.com/profiles/76561198129932218
| customURL: http://steamcommunity.com/id/kukuponpon
| steamrep: http://steamrep.com/profiles/76561198129932218

Target:
| steamname: аdvicebanana
| steam3ID: [U:1:23045495]
| steamID32: STEAM_0:1:11522747
| steamID64: http://steamcommunity.com/profiles/76561197983311223
| customURL: http://steamcommunity.com/id/advicebanana
| steamrep: http://steamrep.com/profiles/76561197983311223

What happened?
He added me and told me he'd need a replacement for a missing player on his team, then linked me to a Teamspeak server that told me to download an alleged new Teamspeak version. It was a virus though.
Virustotal:
https://www.virustotal.com/en/url/3...e51d28b09575345ca7012c42725a7e27867/analysis/
https://www.virustotal.com/en/file/...b628fdc7f573c56495c56b078e3f6f16124/analysis/

Screenshots:
http://files.f-o-g.eu/a298a3f0aec3aa712eacg12ad621ga8c
http://files.f-o-g.eu/db47c10g84d47b67e8e435f91f9b7cae
http://files.f-o-g.eu/960eege025a91bc7cgd9e5f1c3db6e2b
http://files.f-o-g.eu/8bfda7486bdeea7e58aebf2599g5969c

 

Thanks for the report.

Hidden Content:

**Hidden Content: Content of this hidden block can only be seen by members of (usergroups: Legacy Trade Moderator).**

 

Thank you for the report.

A Full tag will be applied for manual phishing.

Hidden Content:

**Hidden Content: Content of this hidden block can only be seen by members of (usergroups: Legacy Trade Moderator).**