Install Steam
login
|
language
简体中文 (Simplified Chinese)
繁體中文 (Traditional Chinese)
日本語 (Japanese)
한국어 (Korean)
ไทย (Thai)
Български (Bulgarian)
Čeština (Czech)
Dansk (Danish)
Deutsch (German)
Español - España (Spanish - Spain)
Español - Latinoamérica (Spanish - Latin America)
Ελληνικά (Greek)
Français (French)
Italiano (Italian)
Bahasa Indonesia (Indonesian)
Magyar (Hungarian)
Nederlands (Dutch)
Norsk (Norwegian)
Polski (Polish)
Português (Portuguese - Portugal)
Português - Brasil (Portuguese - Brazil)
Română (Romanian)
Русский (Russian)
Suomi (Finnish)
Svenska (Swedish)
Türkçe (Turkish)
Tiếng Việt (Vietnamese)
Українська (Ukrainian)
Report a translation problem
deleting all your API keys: https://steamcommunity.com/dev/apikey
deleting cookies in the web browser that was used
checking your logs and reaching out to anyone affected and warning them: https://help.steampowered.com/en/accountdata/GetFriendMessagesLog
This is a serious security vulnerability on Steam's part but I am so sorry for any trouble caused. Please contact me if any further information is needed,
Someone sent me a link and had me "vote for [their] team" and the site used what appeared to be a valid steam SSO method (oauth) which had a valid SSL certificate.
Despite this and the fact that Oauth should only provide public information, a web API key showed up on my account and several people were sent fake messages from my account that contained the same suspicious link.
I have since de-authorized my account access on all devices, cleared all site cookies, and deleted that API key.
This is a serious security vulnerability on Steam's part but I am so sorry for any trouble caused. Please contact me if any further information is needed,