If anyone ever sends you a link on steam...DO NOT click on it! Regardless of if they are on your friends list. I have gotten this twice already, both from people on my friends list, meaning their account got compromised.
here is one example of a link you might see:
http://www.steamcomunitty.hd1.com.br/ DO NOT CLICK ON THIS!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!Post by Belcross on Wraiths site:
Then he says "I need 30 ppl to join my community"
As you can see... that is not a real steam page but it looks damn similar. The last part shows that URL is from somewhere in Brazil. So yeah, it's a scam to get me to "log in" to "steam"