OK so about 8 people so far have added me and said "my friend wants to trade with you but steam is bugging add him please" and then they send a Phishing link.
its really annoying and one important observation i have made is that these invites are timed at the same time when i bump my trade.
i think some hackers have made some script to send invites to people who bump trades and therefore making the invite seem realistic.