Install Steam
login
|
language
简体中文 (Simplified Chinese)
繁體中文 (Traditional Chinese)
日本語 (Japanese)
한국어 (Korean)
ไทย (Thai)
Български (Bulgarian)
Čeština (Czech)
Dansk (Danish)
Deutsch (German)
Español - España (Spanish - Spain)
Español - Latinoamérica (Spanish - Latin America)
Ελληνικά (Greek)
Français (French)
Italiano (Italian)
Bahasa Indonesia (Indonesian)
Magyar (Hungarian)
Nederlands (Dutch)
Norsk (Norwegian)
Polski (Polish)
Português (Portuguese - Portugal)
Português - Brasil (Portuguese - Brazil)
Română (Romanian)
Русский (Russian)
Suomi (Finnish)
Svenska (Swedish)
Türkçe (Turkish)
Tiếng Việt (Vietnamese)
Українська (Ukrainian)
Report a translation problem
Notice how even the comments on this topic disappear from time to time? Steam servers are lagging for one reason or another.
How could someone possibly sign in with his credentials without the 2FA codes?
Hint: They couldn´t.
Hint:
- there's a popular phising method online atm, some sites copy the "login with steam" thingie to get users username, password and 2fa code (and they only need the code once)
You can´t have 2 devices having 2FA codes for 1 account. Even if they managed to access the account, they wouldn´t be able to trade from their device for 7 days and the original owner will be alerted about this activity.
The first part, you actually can (there is a method using the "remember me" checkbox, and you don't need the password either using this method, only the username).
The second part, they don't initiate any trades themselves out of thin air, they just wait for a trade offer to be sent by @OP to someone, they cancel it, then they redirect that same trade offer to their bot accounts instead, after that, if the victim confirms the modified trade in their cellphone they lose the items.
And oh boi, there's been a lot of these guys.