: When a user clicks a "file" within this fake window, a fake Steam login pop-up appears.

: The "window" can often be dragged or closed, further tricking the user into thinking it is a system-level pop-up.

If you are writing a formal report on this,zip TLD controversy ?