We’re already getting to the good part, and quite frankly, this isn’t very hard.
I am going to copy and paste something out of a guide which most of these 'scammers' are working off of, which will describe what files they are getting,etc. Now after doing some research I had found that the scammers can only retrieve these items off your account if you have the 'automatically log me in' stuff turned on, as well as the remember me, and remember my password stuff. Most of the times the files binded are just like a File Manager Trojan, they will not require anything too hefty just the ability to download files off your computer. Pretty much, you will not get scammed if you do not click the links these spammers sent.
These 'scammers' have found a work-around for the steam guard authentication and this allows them to log in to your account without any requirements at all. Most people have been wondering as to how these people are dumb enough to click on the link, but how these people steal their hard earned items without the need to get their password or email to auth steam guard, which would then ban trading for 2 weeks.