Account was hacked, DO NOT USE SKINS MONKEY!

[AwoL-FluX]

So two days ago I used Skins Monkey for the first time, well 3 days ago now but 2 days before I experienced an attack on my steam account yesterday. Normally I would use D market to directly trade items for other items; however with some of the news surrounding D market I gave Skins Monkey a try because I had seen many reputable YouTubers recommending the site. For reference Skins Monkey is the only 3rd party site I used my credentials on recently that I have not had a long time positive relationship working with in terms of buying/selling/trading skins and other CS:GO Items. I used skins monkey to trade my PP-Bizon | Judgement of Anubis in for a AK-47 | Legion of Anubis because tbh I don't really use the PP, I did in the past before I was hip to how much better the MP9, Mac 10 & MP7 are. The trade went smooth, and seemed to work just how it does when I use D market.

That is until I sat down to play sums CS:GO in the evening last night, I had steam opened but my PC was locked, and upon unlocking I found a message from what said "Steam Agent" on the chat box, I never friended this account and I was pretty certain it was not Steam support because it said that I

"...have 3 hours to transfer all game items before account is temporarily closed for investigation due to reports of terms of service violations. During this process all in game items not transferred to another secure account will be deleted."

This is when I immediately knew it was BS, because steam does not give warnings or time limits to move items etc. before giving someone a VAC ban or investigating reports on accounts. You get investigated, you get VAC banned without warning from Valve.

So I refrained from clicking any included links, and took screenshots to send a support ticket to steam to make sure said account was investigated promptly. This is when I noticed my accounts profile picture was removed, my accounts name was changed to a series of numbers and my bio was changed to say that my account was under investigation for a terms of service violation and included a link to a terms of service page. So knowing my account was compromised I checked my steam friends list and sure enough that direct message from the "steam agent" was a unknown account that I never added who was on my friends list. So obviously the hacker added that account, and the rest looked normal so it wasn't that a friends account was compromised.

Moving forward to the good news, although my account was compromised I use 2 factor authentication and Steam's Mobile Authentication tool. So as a result they weren't able to steal any of my items, they also weren't able to change my accounts email, or password or do any significant harm. I can now personally say if you aren't using the mobile authenticater + 2 factor authentication PLEASE ENABLE THESE FEATURES NOW!! I never thought I could get hacked or that it would happen to me but now that it has I am thankful I used these features. I was able to secure my account by deleting my API key and trade URL, changing password, logging out of all devices, changing password one more time before immediately resetting backup codes, and resetting mobile authenticater last. Resting Mobile authentication did make it so I cant use community market for 15 days, which sucks because in my storage unit I have a new AK-47 Ice Coaled I am waiting to unveil to my friends and put into my AK skin shuffle after I buy and put stickers on it, was going to do that today to kick off the weekend :( but at least Ik if the regain access to my account any time in that 15 day period and were in some way able to break thru 2 factor and mobile auth. then no items could be traded or sold.

Last and most important segment of this postt... DO NOT USE SKINS MONKEY!!!!!! It is the only 3rd party site that I recently logged into in a few months, so I think it is safe to say that is where my security breach occurred because in less than a full 48 hours after my steam account was compromised.

[az0id]

Originally posted by AwoL-FluX:

So two days ago I used Skins Monkey for the first time, well 3 days ago now but 2 days before I experienced an attack on my steam account yesterday. Normally I would use ♥♥♥♥♥♥♥ to directly trade items for other items; however with some of the news surrounding ♥♥♥♥♥♥♥ I gave Skins Monkey a try because I had seen many reputable YouTubers recommending the site. For reference Skins Monkey is the only 3rd party site I used my credentials on recently that I have not had a long time positive relationship working with in terms of buying/selling/trading skins and other CS:GO Items. I used skins monkey to trade my PP-Bizon | Judgement of Anubis in for a AK-47 | Legion of Anubis because tbh I don't really use the PP, I did in the past before I was hip to how much better the MP9, Mac 10 & MP7 are. The trade went smooth, and seemed to work just how it does when I use ♥♥♥♥♥♥♥.

That is until I sat down to play sums CS:GO in the evening last night, I had steam opened but my PC was locked, and upon unlocking I found a message from what said "Steam Agent" on the chat box, I never friended this account and I was pretty certain it was not Steam support because it said that I

"...have 3 hours to transfer all game items before account is temporarily closed for investigation due to reports of terms of service violations. During this process all in game items not transferred to another secure account will be deleted."

This is when I immediately knew it was BS, because steam does not give warnings or time limits to move items etc. before giving someone a VAC ban or investigating reports on accounts. You get investigated, you get VAC banned without warning from Valve.

So I refrained from clicking any included links, and took screenshots to send a support ticket to steam to make sure said account was investigated promptly. This is when I noticed my accounts profile picture was removed, my accounts name was changed to a series of numbers and my bio was changed to say that my account was under investigation for a terms of service violation and included a link to a terms of service page. So knowing my account was compromised I checked my steam friends list and sure enough that direct message from the "steam agent" was a unknown account that I never added who was on my friends list. So obviously the hacker added that account, and the rest looked normal so it wasn't that a friends account was compromised.

Moving forward to the good news, although my account was compromised I use 2 factor authentication and Steam's Mobile Authentication tool. So as a result they weren't able to steal any of my items, they also weren't able to change my accounts email, or password or do any significant harm. I can now personally say if you aren't using the mobile authenticater + 2 factor authentication PLEASE ENABLE THESE FEATURES NOW!! I never thought I could get hacked or that it would happen to me but now that it has I am thankful I used these features. I was able to secure my account by deleting my API key and trade URL, changing password, logging out of all devices, changing password one more time before immediately resetting backup codes, and resetting mobile authenticater last. Resting Mobile authentication did make it so I cant use community market for 15 days, which sucks because in my storage unit I have a new AK-47 Ice Coaled I am waiting to unveil to my friends and put into my AK skin shuffle after I buy and put stickers on it, was going to do that today to kick off the weekend :( but at least Ik if the regain access to my account any time in that 15 day period and were in some way able to break thru 2 factor and mobile auth. then no items could be traded or sold.

Last and most important segment of this postt... DO NOT USE SKINS MONKEY!!!!!! It is the only 3rd party site that I recently logged into in a few months, so I think it is safe to say that is where my security breach occurred because in less than a full 48 hours after my steam account was compromised.

Very sad story, but awsome ending, and cool the 2 factor saved the day thx for the warning bro i sended some points your way ^^

[A1mdoktor]

Originally posted by AwoL-FluX:

So two days ago I used Skins Monkey for the first time, well 3 days ago now but 2 days before I experienced an attack on my steam account yesterday. Normally I would use ♥♥♥♥♥♥♥ to directly trade items for other items; however with some of the news surrounding ♥♥♥♥♥♥♥ I gave Skins Monkey a try because I had seen many reputable YouTubers recommending the site. For reference Skins Monkey is the only 3rd party site I used my credentials on recently that I have not had a long time positive relationship working with in terms of buying/selling/trading skins and other CS:GO Items. I used skins monkey to trade my PP-Bizon | Judgement of Anubis in for a AK-47 | Legion of Anubis because tbh I don't really use the PP, I did in the past before I was hip to how much better the MP9, Mac 10 & MP7 are. The trade went smooth, and seemed to work just how it does when I use ♥♥♥♥♥♥♥.

That is until I sat down to play sums CS:GO in the evening last night, I had steam opened but my PC was locked, and upon unlocking I found a message from what said "Steam Agent" on the chat box, I never friended this account and I was pretty certain it was not Steam support because it said that I

"...have 3 hours to transfer all game items before account is temporarily closed for investigation due to reports of terms of service violations. During this process all in game items not transferred to another secure account will be deleted."

This is when I immediately knew it was BS, because steam does not give warnings or time limits to move items etc. before giving someone a VAC ban or investigating reports on accounts. You get investigated, you get VAC banned without warning from Valve.

So I refrained from clicking any included links, and took screenshots to send a support ticket to steam to make sure said account was investigated promptly. This is when I noticed my accounts profile picture was removed, my accounts name was changed to a series of numbers and my bio was changed to say that my account was under investigation for a terms of service violation and included a link to a terms of service page. So knowing my account was compromised I checked my steam friends list and sure enough that direct message from the "steam agent" was a unknown account that I never added who was on my friends list. So obviously the hacker added that account, and the rest looked normal so it wasn't that a friends account was compromised.

Moving forward to the good news, although my account was compromised I use 2 factor authentication and Steam's Mobile Authentication tool. So as a result they weren't able to steal any of my items, they also weren't able to change my accounts email, or password or do any significant harm. I can now personally say if you aren't using the mobile authenticater + 2 factor authentication PLEASE ENABLE THESE FEATURES NOW!! I never thought I could get hacked or that it would happen to me but now that it has I am thankful I used these features. I was able to secure my account by deleting my API key and trade URL, changing password, logging out of all devices, changing password one more time before immediately resetting backup codes, and resetting mobile authenticater last. Resting Mobile authentication did make it so I cant use community market for 15 days, which sucks because in my storage unit I have a new AK-47 Ice Coaled I am waiting to unveil to my friends and put into my AK skin shuffle after I buy and put stickers on it, was going to do that today to kick off the weekend :( but at least Ik if the regain access to my account any time in that 15 day period and were in some way able to break thru 2 factor and mobile auth. then no items could be traded or sold.

Last and most important segment of this postt... DO NOT USE SKINS MONKEY!!!!!! It is the only 3rd party site that I recently logged into in a few months, so I think it is safe to say that is where my security breach occurred because in less than a full 48 hours after my steam account was compromised.

you logged in to a fake skins monkey site, not the real one.

[will i am]

Originally posted by A1mdoktor:

Originally posted by AwoL-FluX:

So two days ago I used Skins Monkey for the first time, well 3 days ago now but 2 days before I experienced an attack on my steam account yesterday. Normally I would use ♥♥♥♥♥♥♥ to directly trade items for other items; however with some of the news surrounding ♥♥♥♥♥♥♥ I gave Skins Monkey a try because I had seen many reputable YouTubers recommending the site. For reference Skins Monkey is the only 3rd party site I used my credentials on recently that I have not had a long time positive relationship working with in terms of buying/selling/trading skins and other CS:GO Items. I used skins monkey to trade my PP-Bizon | Judgement of Anubis in for a AK-47 | Legion of Anubis because tbh I don't really use the PP, I did in the past before I was hip to how much better the MP9, Mac 10 & MP7 are. The trade went smooth, and seemed to work just how it does when I use ♥♥♥♥♥♥♥.

That is until I sat down to play sums CS:GO in the evening last night, I had steam opened but my PC was locked, and upon unlocking I found a message from what said "Steam Agent" on the chat box, I never friended this account and I was pretty certain it was not Steam support because it said that I

"...have 3 hours to transfer all game items before account is temporarily closed for investigation due to reports of terms of service violations. During this process all in game items not transferred to another secure account will be deleted."

This is when I immediately knew it was BS, because steam does not give warnings or time limits to move items etc. before giving someone a VAC ban or investigating reports on accounts. You get investigated, you get VAC banned without warning from Valve.

So I refrained from clicking any included links, and took screenshots to send a support ticket to steam to make sure said account was investigated promptly. This is when I noticed my accounts profile picture was removed, my accounts name was changed to a series of numbers and my bio was changed to say that my account was under investigation for a terms of service violation and included a link to a terms of service page. So knowing my account was compromised I checked my steam friends list and sure enough that direct message from the "steam agent" was a unknown account that I never added who was on my friends list. So obviously the hacker added that account, and the rest looked normal so it wasn't that a friends account was compromised.

Moving forward to the good news, although my account was compromised I use 2 factor authentication and Steam's Mobile Authentication tool. So as a result they weren't able to steal any of my items, they also weren't able to change my accounts email, or password or do any significant harm. I can now personally say if you aren't using the mobile authenticater + 2 factor authentication PLEASE ENABLE THESE FEATURES NOW!! I never thought I could get hacked or that it would happen to me but now that it has I am thankful I used these features. I was able to secure my account by deleting my API key and trade URL, changing password, logging out of all devices, changing password one more time before immediately resetting backup codes, and resetting mobile authenticater last. Resting Mobile authentication did make it so I cant use community market for 15 days, which sucks because in my storage unit I have a new AK-47 Ice Coaled I am waiting to unveil to my friends and put into my AK skin shuffle after I buy and put stickers on it, was going to do that today to kick off the weekend :( but at least Ik if the regain access to my account any time in that 15 day period and were in some way able to break thru 2 factor and mobile auth. then no items could be traded or sold.

Last and most important segment of this postt... DO NOT USE SKINS MONKEY!!!!!! It is the only 3rd party site that I recently logged into in a few months, so I think it is safe to say that is where my security breach occurred because in less than a full 48 hours after my steam account was compromised.

you logged in to a fake skins monkey site, not the real one.

yeah you probably went to a fake one

[Dréco (inactive)]

Use adblock, and be happy :)
Stay safe, see ya

[丸]

maybe you got hack beacuse you use a mimic site of skinsmonkey and they still your information?

[𐰢]

Originally posted by ๋:

maybe you got hack beacuse you use a mimic site of skinsmonkey and they still your information?

Why are you necroing 1+ years old threads? Do you have nothing better to do?