Signal boosting: Steamy phish going around

by

So far three of my Steam friends have messaged me with variations on the following:
"hey"
"are you/r u busy/free rn?"

This is the beginning of a phishing scam. They're not your friend, your friend's account has been hijacked. I don't know the details, but the link supposedly steals your credentials, probably through some cross-site scripting exploit. The "rn" abbreviation has so far been constant.

So far as I know, my account hasn't been compromised in the same way: I haven't seen any Steam Guard messages about a login attempt, I haven't heard from anybody saying they've gotten the message from me, and I changed my password after first coming across the suspicious link (which displayed a thumbnail in Steam chat).

If you see a message that looks like that from me or anybody else, best not to reply and contact your friend by other means if possible.