[SCAM ALERT] Beware of this new scam !

[rabi0ne]

So a guy wanted to trade a knife vs knife.
He told me to send my items to a 2nd account (mine, and i have it in my friends list...) but cancel it afterward and send just screenshot.

I clicked ON MY FRIENDS LIST (shortcut created for my 2nd acc), i traded my skins, but obviously, the trade was with another account (similar; same name and profile pic...) which is not mine...

My 2nd account says "Trade cancelled" but i don't have the items... neither on my main nor on my 2nd acc. They are gone to the thief's account...

I really don't know how it happend...

[H4CK3R MAN]

Originally posted by rabi0ne:

I use Eset Internet security; but this malware was spoted by Malwarebytes

hmm

Try a diffrent few, but avoid Avast. It's known for false positives. I recently scanned my computer using it and it flagged the standard windows calculator as a rookit along other standard window programs

[rabi0ne]

Originally posted by H4CK3R MAN:

hmm

Try a diffrent few, but avoid Avast. It's known for false positives. I recently scanned my computer using it and it flagged the standard windows calculator as a rookit along other standard window programs

xD Calc.Exe tries to invade your world.

Anyway, i have steamguard phone app, they can't access my acc; but the problem is the API key i just revoked. I used it in 2 things (Leetify and this extension) and im pretty sure it's the extension...

[Си́нтез]

Steam trading is simple as a rock.
-no websites
-no browser extensions
-no third accounts (friends, second accounts, middlemen, bots, etc)
-no screenshots, no videos, no desktope remote sharing

Only two accounts, using same, one, single trade window. That is proper steam trading. If they want to introduce anything else for any reason - walk away . No exceptions.

[clap500m]

Originally posted by poprygun:

Steam trading is simple as a rock.
-no websites
-no browser extensions
-no third accounts (friends, second accounts, middlemen, bots, etc)
-no screenshots, no videos, no desktope remote sharing

Only two accounts, using same, one, single trade window. If they want to introduce anything else for any reason - walk away

I use an extension to see the value of the items, do you say I don't use it?

[Irene ❤]

𝙰𝚌𝚌𝚘𝚞𝚗𝚝 𝙲𝚘𝚖𝚙𝚛𝚘𝚖𝚒𝚜𝚎𝚍

Cause
Some 3rd party tournament / trading / unbox sites were fake. They have a fake steam log in page to steal your account name and password. Check your account log in history here.

When compromised, bots can modify your trade offer by cancelling your current trade and create new ones to a fake profile. As the trade modification was instant, you could have authenicate it on phone without knowing.

Safeguard

• Change your Steam password.
  
• Deauthorize all other computers or devices, except the one you're using.
  https://store.steampowered.com/twofactor/manage
  
• Revoke your Account Web Access Key if they had create one for you.
  https://steamcommunity.com/dev/apikey - (If there isn't any, do not register or create any)
  
• Remove current trade URL and create a new link.
  https://steamcommunity.com/id/me/tradeoffers/privacy#trade_offer_access_url
  
• Look for suspicious 3rd party website log in history here.

Never enter your password for a second time once chrome have save it for use on official steam websites.

🅸🆁🅴🅽🅴

[rabi0ne]

Originally posted by Clap:

Originally posted by poprygun:

Steam trading is simple as a rock.
-no websites
-no browser extensions
-no third accounts (friends, second accounts, middlemen, bots, etc)
-no screenshots, no videos, no desktope remote sharing

Only two accounts, using same, one, single trade window. If they want to introduce anything else for any reason - walk away

I use an extension to see the value of the items, do you say I don't use it?

If they ask for your API key; yes.

[diamondjozu]

'new scam'


im getting frustrated that these people who own expensive items dont even know any sort of scams in the first place...


perhaps next time if you were to own expensive items again,just do normal steam trading..no need to send it to your friends or clean it or other crap.

go on youtube and seach up scams on steam and ways to recover from it

[rabi0ne]

Originally posted by diamond jozu(new phone numb):

'new scam'


im getting frustrated that these people who own expensive items dont even know any sort of scams in the first place...


perhaps next time if you were to own expensive items again,just do normal steam trading..no need to send it to your friends or clean it or other crap.

go on youtube and seach up scams on steam and ways to recover from it

Man, i looked several times in the scam section in this forum, it lists "all" possible scams.

It talks about middle man scam (which isn't the case here) but nothing about API scam. Which is basically a hack.

Anyway, this won't give me back my items... So...

[clap500m]

Don't listen to him, people are idiots, and they write idiots.
They think that to help you have to treat yourself like trash, and there you realize that the trash is them

[clap500m]

A friend was stolen similar, he was passing the items to another account, when he accepted from STEAM WARD, everything disappeared, but he NEVER entered any page. When I notice this they said the same thing to you. I think it is a hack

[Hamless Hog]

Originally posted by Clap:

A friend was stolen similar, he was passing the items to another account, when he accepted from STEAM WARD, everything disappeared, but he NEVER entered any page. When I notice this they said the same thing to you. I think it is a hack

It is a pretty well known scam already. it requires the user to give away their account info.

[rabi0ne]

I'll post tomorrow the thief's accounts. Can't copy it from phone :/

Thank you guys...

@Hogart : no, i gave him nothing. My API key was shared to a firefox extension.

[red_dwarf]

whatever, skins have no value and no impact on skill. Nothing happened. If Valve delete all skins, it will make the game great again.

[Hamless Hog]

Originally posted by rabi0ne:

I'll post tomorrow the thief's accounts. Can't copy it from phone :/

Thank you guys...

@Hogart : no, i gave him nothing. My API key was shared to a firefox extension.

i wouldnt post the profile, as its against the rules.

what makes you think it was a firefox extension?

[76561199049373846]

I had a similar experience before in another account that i had