"Steam Birthday" crashed by party poopers

Here's a rather amateur phish targeting Steam users, located at steambirthday(dot)com. No birthday prizes for guessing what this scam is all about:

Click to Enlarge

You know you're dealing with a special kind of phish when the opening ramble begins with "Steam is 3 years old: the Steam project started in 2003" and "In a really short time our servers became more and more and today there are more than a thousand meters of them".

According to the website, Valve - the creators of Steam - are giving away "1000 Gold accounts, which will allow you to play all 72 games for free" (Steam actually has 1,400+ titles available for download). Hitting the gold coloured "Upgrade now" button takes the end-user to a brilliantly convincing phish page. Or, to be more accurate, it takes them to missing images and screwed up HTML code:

Click to Enlarge

The site is already flagged in Chrome as a phish page, and hopefully IE and others will follow suit soon. For now, let's hold off on the birthday celebrations.

Christopher Boyd