https://www.reddit.com/r/Steam/comments/5skfg4/warning_regarding_a_steam_profile_related_exploit/
This is getting bounced around various Steam communities. Do not click on any Steam profiles, and do not click on your own activity log, as the exploit can show up there if anyone on your friends list is compromised.
