Rudzi rutsva rwekubira runoshandiswa nematsotsi kuba uye kutengesazve Steam account. Izvi ndizvo zvinodaidzwa nenyanzvi bhurawuza-mu-browser kurwisa, izvo zvinoratidza kuti sikirini yekupinda inoita senge pop-up.
Iyo nzira nyowani yakatowanikwa kare gore rino nemuongorori ane pseudonym mr.d0x. Ikozvino kuferefetwa kwakaitwa nekambani yekuchengetedza Boka IB kunoratidza kuti nzira iyi iri kushandiswa kubvuta zvitupa zveakaundi account. Zvakafanana neanozivikanwa maitiro ehupishing, munhu akabatwa anoendeswa kune imwe fake webhusaiti yakagadzwa neano hacker. Ndozvakaitawo nekurwiswa uku kwevashandisi veSteam. Vakakuvadzwa vanokwezvwa kune Counterstrike makwikwi webhusaiti uye vanofanirwa kupinda neavo Steam account.
Kazhinji, ssl chitupa uye kazhinji zvakare url inoratidza kuti haisi saiti yepamutemo. Nebrowser-in-browser tekinoroji, izvi zvakanyanya kuoma kuona, nekuti iyi saiti yekubira inoshandisa JavaScript kuratidza pop-up yekupinda hwindo, iro rinenge risingazivikanwe kubva kune chaiyo Steam login hwindo.
Iwindo rinogona kungofambiswa mukati meiyo yakavhurika tab. Pamusoro pezvo, iyo URL iri mufafitera remanyepo inoitawo seyakakodzera uye kukiya kwegirinhi kwechitupa cheSSL chaiko kunoratidzwa. Chete kana munhu akabatwa avhara hwindo rekutanga ndipo pazvinozobuda pachena kuti pop-up screen chikamu cheiyo peji peji.
Iyo nguva iyo munhu akabatwa akabudirira kupinda nepahwindo rekunyepedzera, matsotsi anokwanisa kuwana iyo Steam account. Kuti urege kuvhundutsa munhu akabatwa, pawakabudirira kupinda, ivo vanozoendeswa kune imwe nhangemutange yekupinda yekusimbisa peji.