"I almost got my Steam hacked"

It's a fairly old trick.

https://arstechnica.com/information-technology/2022/03/behol...

Solution: configure your browser to force new windows into new tabs. Also, if you are using an unpopular OS, they probably won't bother to copy the window style.