Thanks for the heads-up... sadly, crooks and scammers are everywhere there's money involved.
Whoever this is, they sort of blew it by targeting Steemit's "richlist" which is pretty much very experienced users who'd see through this in a second.
That said, we should probably keep a sharp eye out for copycats.
It was a very simple attempt, probably they're just gauging the platform, assessing the response, risks, etc.