Someone contacted me on Steam and asked if I wanted to play TF2 with him. It was one of my most played games at the time and I had a TF2 avatar, so no surprises here.
That person later asked me to rate their TF2 team on some website. Didn’t care first but did it eventually. The website needed Steam auth but just faked the Steam auth and relayed every bit of information you entered to steal your account.
Quickly realized my mistake and reset my password before anything happened. Im still surprised how much effort went into this fake rating site just to steal some Steam accounts.