On Discord, there has been certain people sending you a steam trade link. When you click that link it will redirect you to a fake steam website, you login and they get all your info.
Now, there has been another variant, the .ru domain, which automatically steals all your info without you doing anything at all.