Steam Sheriff

Steam Sheriff helps gamers using the Steam platform by checking URLs as they are visited to see if they are potentially impersonating a 'brand'.

Malware/Phishing actors make websites that closely resemble a 'brand'. For example, the legitimate Steam website is www.steamcommunity.com. Phishers leverage 'homograph' attacks to trick you to clicking a URL that you think you trust. So, st3amcommunity.com or steamcomunity.com might look legitimate to a human, but very different for a computer.

In order to detect these attacks, Steam Sheriff uses a combination of techniques to find out the 'similarity' of a target compared to a white list. This whitelist are common websites collected from feedback from the community that have also been used in attacks in the past. The list is as follows:

'gyazo.com', 'flickr.com', 'imgur.com', 'photobucket.com', 'tinypic.com', 'dota2lounge.com', 'csgolounge.com', 'steamcommunity.com', 'csgoticket.com',