Steam API SCAM, ~CHROME EXTENSION SCRIPT~

[Ben]

Getting to the point, i was scammed last night. This is a warning about how i was very unlucky. I am not asking for anything in this thread just for people to educate themselves. Last night i was about to start trading on Rollbit,com. I created a deposit listing for my 𝗦𝗧 𝗕𝘂𝘁𝘁𝗲𝗿𝗳𝗹𝘆 𝗞𝗻𝗶𝗳𝗲 𝘀𝗹𝗮𝘂𝗴𝗵𝘁𝗲𝗿 𝗙𝗡 for 684$ after around an hour somebody wanted to withdraw it. I sent a trade offer successfully and confirmed the trade, the skins swiftly arrived in the trade partners inventory. I had received my 686 coins, shortly after in about 2 seconds, the whole of my balance was instantly removed. I panicked, and thought the funds did not load. Turns out i my Steam account was compromised, my funds where instantly withdrawn to Ether and i was left empty handed. Before i traded, earlier in the day, I revoked my Api key, deauthorised my steam login, and changed my password. I honestly was stumped to how i had been scammed. Later last night i checked my Chrome extensions and i found a small extension with a script that had somehow stolen my Rollbit wallet balance. I'm unsure if i have malware i ran Malwarebytes but no detections. In conjunction to this, always check everything before trading!
I'd say in my case i was very unlucky. Henceforth the Chrome extension script has been deleted.

I would Greatly appreciate if anybody could help me with this information, is it possible to trace Ether wallets, here are the transactions, should i report it to the police?
https://etherscan.io/address/0xfe11310fe4bfb6aef65d585f24e6705621a918cf

I doubt this thread will gain any traction but thanks for reading, and stay safe. Please ask me any questions to help with this.

[Hamless Hog]

Stop going to sketchy sites

[Ben]

Originally posted by Hogarth:

Stop going to sketchy sites

I suppose that's the moral of the story but there's not enough information out there about api scams.

[Hamless Hog]

Originally posted by Lobbie:

Originally posted by Hogarth:

Stop going to sketchy sites

I suppose that's the moral of the story but there's not enough information out there about api scams.

Just don’t give your account information away

[Bomsusik]

First of all, thanks for the heads-up.

And speaking of crypto, it really is a grey area and you can't really do anything about it, same goes to exchange of virtual items.

The best thing you can do is to take it as a lesson and avoid sketchy sites which are unknown/new/not trusted by the community. Learn further on different kinds of scams, especially when it comes to API.

I hope you all the best.

[Ben]

Originally posted by Bomsusik | #PlantChange:

First of all, thanks for the heads-up.

And speaking of crypto, it really is a grey area and you can't really do anything about it, same goes to exchange of virtual items.

The best thing you can do is to take it as a lesson and avoid sketchy sites which are unknown/new/not trusted by the community. Learn further on different kinds of scams, especially when it comes to API.

I hope you all the best.

Thanks dude, this was really an ice-breaker of a situation, i feel like people don't take these things seriously like i did. The consequences can be huge. I don't think people realise how easy it is to fall victim.

[Ben]

Originally posted by eld3r:

Originally posted by Lobbie:

I suppose that's the moral of the story but there's not enough information out there about api scams.

there is plenty of information about api scams but people dont bother looking for it or even realizing they need to look for it until after they have been scammed

You're so right. It's scary how easy it is to become a victim of these scams. Thanks for commenting

[Bomsusik]

Originally posted by Lobbie:

Originally posted by Bomsusik | #PlantChange:

First of all, thanks for the heads-up.

And speaking of crypto, it really is a grey area and you can't really do anything about it, same goes to exchange of virtual items.

The best thing you can do is to take it as a lesson and avoid sketchy sites which are unknown/new/not trusted by the community. Learn further on different kinds of scams, especially when it comes to API.

I hope you all the best.

Thanks dude, this was really an ice-breaker of a situation, i feel like people don't take these things seriously like i did. The consequences can be huge. I don't think people realise how easy it is to fall victim.

I should fix you on that my friend: it's easy to fall victim for these scams if you are not careful and uneducated enough on the matter.

Sorry if it sounds blunt, but this is the way it works. Last time I got scammed, I realized that I did a mistake by not looking into it deeper, and there were red flags, there always are.

[Си́нтез]

Any "legit" website, that should be used in steam trading should have url steamcommunity.com or steampowered.com .
This website's support section is one page with one paragraph. One freaking page support section with an email and a phone. In this day and age.

Their "fairness" page (seriously is that a joke) says "PROVABLY FAIR".

I am speechless. Such websites should not be trusted with grainy bigfoot footage from phone with 320x240 camera, let alone with account credentials for steam or valuable steam items. Please, use only steam when you operate items like a valuable knife.

Edit: company name "pengwins". Is this some sort of meme or what

[Ben]

Originally posted by Dota Superking:

Any "legit" website, that should be used in steam trading should have url steamcommunity.com or steampowered.com .
This website's support section is one page with one paragraph. One freaking page support section with an email and a phone. In this day and age.

Their "fairness" page (seriously is that a joke) says "PROVABLY FAIR".

I am speechless. These guys should not be trusted with grainy bigfoot footage from phone with 320x240 camera, let alone with account credentials for steam or valuable steam items. Please, use only steam when you operate items like a valuable knife.

Edit: company name "pengwins". Is this some sort of meme or what

Thanks so much for putting your time into this, honestly their site is a joke. Their security is negligible. Rollbit’s so unfinished. It baffles me how they can operate.

[Acey]

thats so much money lost bro, rip
i guess next time you could try more well known sites if you ever want to start trading
ive been using cs.moneys trade bot so far so good you can give it a try

[Kotzi]

Originally posted by Bomsusik | #PlantChange:

First of all, thanks for the heads-up.

And speaking of crypto, it really is a grey area and you can't really do anything about it, same goes to exchange of virtual items.

The best thing you can do is to take it as a lesson and avoid sketchy sites which are unknown/new/not trusted by the community. Learn further on different kinds of scams, especially when it comes to API.

I hope you all the best.

Depends on the country, for example where I live you can actually sue people for scamming virtual items or crypto.

Thanks for telling about this, I really do feel sorry for you

[Kotzi]

Originally posted by blameF:

thats so much money lost bro, rip
i guess next time you could try more well known sites if you ever want to start trading
ive been using cs.moneys trade bot so far so good you can give it a try

Rollbit is a well known and legit site, I think you didn't understand what the cause of the scam was