As you may know, phishing takes many forms. Such as a fake Mumble client or "tournament anti-cheat program" that they request victims to install. If you need to install a program, search for it yourself online. Do not download programs linked to you in Steam chat. If you can't find the real site (which will be in top Google results anyways) it's probably fake. If you never heard of it, don't download/install it.