"fishing" for passwords by leading someone to a website masquerading as an official website with a login page that is fakey fake
i think
More accurately explained:
People are putting their login info into a fake page.
Which is funny, because steamguard is supposed to prevent stuff like that from happening.