Bandicoot0123 Feb 25 @ 2:23am
HACKED ACCOUNT,can someone help me?
This morning I received an invite from a person who I don't know, without adding him he write to me and says: "Hi,my friend want to trade with you. Add him!" Then he sent a link with an url like this : "steamncomuniity" (i know, it's false but i realized it after), after clicking in the "Add Friend" button and writing username and password, "steam" says me to upload a file called "ssfn0123456789" (it changes at user). I dumbly upload that file and then i quickly click the X button and the browser closed. (That's the time when i realize the hack)
I trade all my item at a friend of mine, then I changed e-mail,password and the secret question...
So, my question is...after I change my password there is the possibility for this person to enter in my account?
P.S. I haven't logged out yet.
P.S.S. Can someone explain me what i exactly sent to him? And what this file "ssfn" contains?

Sorry for my bad english.

EDIT:I want to say that i've made a steam support ticket after that "hack", in that same day a guy from steam support responded to me that my account will be permanent blocked until i will change steam password, email password and security question then you have to tell him to unlock your account; after that i had to protect my account with steam guard again...i was very lucky :)
Last edited by Bandicoot0123; Sep 13 @ 9:24am
Showing 1-15 of 31 comments
< >
Mawile (Darkanine) (Banned) Feb 25 @ 2:30am 
Send a support ticket to Valve, they should be able to help you out.
BASEBALLFURIES Feb 25 @ 2:36am 
by any chance was the guys name " [unassigned]"
Last edited by BASEBALLFURIES; Feb 25 @ 2:38am
Bandicoot0123 Feb 25 @ 2:38am 
Originally posted by BASEBALLFURIES:
by any chance was this the guy that added you?
http://steamcommunity.com/profiles/76561198103661654/
name- [unassigned]
Yes,he is.
[EMU] Mr. Conga (Banned) Feb 25 @ 2:39am 
Your name though.....
BASEBALLFURIES Feb 25 @ 2:39am 
shame. i got the same invite. as did a friend of mine.
Flustig  Feb 25 @ 2:41am 
Originally posted by Mawile (Darkanine):
Send a support ticket to Valve, they should be able to help you out.
ye if he can keep logged for multiple days lol valve is taking good time on tickets
Bandicoot0123 Feb 25 @ 2:41am 
Originally posted by BASEBALLFURIES:
shame. i got the same invite. as did a friend of mine.
Hope you don't upload that file
Last edited by Bandicoot0123; Feb 25 @ 2:42am
BASEBALLFURIES Feb 25 @ 2:43am 
i didnt click the link. i had this batch of reasons i came up with a few weeks ago on why i wont add somebody just to string them along but im starting to to run dry. dude apparantly plays dota a bit some im am a bit puzzled there
Satsujin Jiken Feb 25 @ 3:05am 
Does anyone know what that file uploading part is for?

Anyway just make sure you have a new Steam password that doesn't relate to the old one, and make sure your contact e-mail is one that belongs to you and doesn't have the same password as your Steam account had. I can't imagine how they could hack you after this.
[EMU] Mr. Conga (Banned) Feb 25 @ 3:11am 
Originally posted by Satsujin Jiken:
Does anyone know what that file uploading part is for?

Anyway just make sure you have a new Steam password that doesn't relate to the old one, and make sure your contact e-mail is one that belongs to you and doesn't have the same password as your Steam account had. I can't imagine how they could hack you after this.
Well.. what if it's a system 32 file? It looks like a system 32 file..
Satsujin Jiken Feb 25 @ 3:21am 
http://forums.steampowered.com/forums/showthread.php?p=21144360

Apparently it is Steam guard file. Meaning as long as the other guy has this file he doesn't have to authenticate his machine with Steam guard and can just start trading right off the bat.

BUT. It doesn't matter because he can't log in if you've changed your password. Unless he already had enough time to log in..

EDIT: Also, who doesn't see something is wrong when they upload such file? The gullibility of some people... I bet they trusted if it said "Trade all your items to person xxx to validate your Steam installation".
Last edited by Satsujin Jiken; Feb 25 @ 3:23am
Bandicoot0123 Feb 25 @ 3:25am 
Originally posted by Satsujin Jiken:
http://forums.steampowered.com/forums/showthread.php?p=21144360

Apparently it is Steam guard file. Meaning as long as the other guy has this file he doesn't have to authenticate his machine with Steam guard and can just start trading right off the bat.

BUT. It doesn't matter because he can't log in if you've changed your password. Unless he already had enough time to log in...
I haven't logged out yet after uploading the file.
®Santa_Global_Delite!! Feb 25 @ 3:28am 
Originally posted by Satsujin Jiken:
Does anyone know what that file uploading part is for?

Anyway just make sure you have a new Steam password that doesn't relate to the old one, and make sure your contact e-mail is one that belongs to you and doesn't have the same password as your Steam account had. I can't imagine how they could hack you after this.
Anything can be hacked! Take the proper precautions and it should not happen, And never EVER CLICK ON A LINK YOU DONT INSPECT and know first! And dont download it for gods sake! Luckily Steam is pretty good at keeping on top of this, I just dont understand the lack of a support phone number, Besides they can save money by not having one!
Satsujin Jiken Feb 25 @ 3:34am 
I'm not an expert on this but I'll write this if anyone can confirm:

You can sign in the browser version of Steam even if you are signed in from installed Steam somewhere else and it doesn't force you to sign out of installed Steam. You can even make trades in browser Steam while the installed Steam is running.

BUT. AFAIK you can't use the ssfn file to verify any browser Steam login attempts.

So the only way they could get around Steam guard via that file is installed Steam. Signing in with installed Steam forces the other instance of installed Steam to sign out and prompts for re-login on that machine.

So, if you haven't gotten a prompt for "Steam account is currently logged in at another location" it is safe to say they haven't accessed your account yet. IF my assumption on browser verification is right.
Bandicoot0123 Feb 25 @ 3:38am 
Originally posted by Satsujin Jiken:
I'm not an expert on this but I'll write this if anyone can confirm:

You can sign in the browser version of Steam even if you are signed in from installed Steam somewhere else and it doesn't force you to sign out of installed Steam. You can even make trades in browser Steam while the installed Steam is running.

BUT. AFAIK you can't use the ssfn file to verify any browser Steam login attempts.

So the only way they could get around Steam guard via that file is installed Steam. Signing in with installed Steam forces the other instance of installed Steam to sign out and prompts for re-login on that machine.

So, if you haven't gotten a prompt for "Steam account is currently logged in at another location" it is safe to say they haven't accessed your account yet. IF my assumption on browser verification is right.
You're right. The message haven't showed up yet, so he haven't try to log in. I sent a message to steam about that and i'll wait a response from they.
Showing 1-15 of 31 comments
< >
Per page: 15 30 50