

Multiple people have reported this website as malicious, but over a year later the site remains alive and well, still near the top of Google's search results for "Steam Desktop Authenticator". If you run his version of the application, you're not just bypassing SteamGuard, you're effectively giving him access to it, in addition to your account password.

This website forked the code from the Desktop Authenticator, with a couple extra lines added to send a copy of your Steam account to the scammer to his server. However, before long a website claiming to be from Jesse and Geel still popped up.

Unfortunately, Jesse and Geel did not register a website for the Desktop Authenticator, and kept it exclusively on Github. However, bypassing 2-factor authentication in Steam comes with some serious liabilities. Valve may not agree with their decision, but the desktop authenticator provided a much-needed alternative for people who couldn't easily get a phone due to their country of residence, financial commitment, or other reasons, but weren't willing to give up trading. In response to public outcry, Jesse and Geel from Scrap.tf created a desktop authenticator workaround, which would effectively emulate the smartphone app on your computer if you couldn't get a smartphone. Nearly 3 years ago, Valve started requiring the Steam Mobile App's 2-factor authentication for trading and other features like competitive play. Any other source will contain Steam-stealer malware. TL DR - There is only 1 legitimate source for the Steam Desktop Authenticator.
