My steam got hacked with every security method ik enabled

[Asa]

My cs inventory got hacked recently with all items traded away. I have steam guard on, email authentication, but someone managed to add their own device as a steam guard authenticator and accessed my steam account. I did not leak my password to anyone nor the authentication code sent to my phone. The only time I logged into third party I know is to bitskin and csfloat through the official steam login page. I don’t know how they get access and if any, things I can do to get my item back.

[SnUs]

"The only time I logged into third party I know is to bitskin and csfloat"

case closed

[T-rEx]

i Got haced so they started deleting my games in steam. got message from a girl profile named evelyn myers that said that i was involed in a fraud and had to verify my account or it would be deleted and that i had to verify with the steam authenticator and they took all my inventory from cs:go 2 skins and knifes and weapons.

[илья]

if you go to some sites, always check your Steam API key. They seem to have put the key on your account and so in the form of skins

[Proskey]

I had notification also for stuff from csgo n tf2 being traded or sold idk wtf is up with steam but it's scaring me. Even have authentication on too. So idk what's steam doing but not sure if I was hacked or valve messed up

[Asa]

its not even a few items it is my entire inventory. Nothing is left

[Asa]

Originally posted by илья:

if you go to some sites, always check your Steam API key. They seem to have put the key on your account and so in the form of skins

I only entered my api key for bitskin and csfloat only for trading and they are reputable websites. If they are leaking the accounts then we all should be cautious. Steam should take some acts on it.

[Asa]

Originally posted by T-rEx:

i Got haced so they started deleting my games in steam. got message from a girl profile named evelyn myers that said that i was involed in a fraud and had to verify my account or it would be deleted and that i had to verify with the steam authenticator and they took all my inventory from cs:go 2 skins and knifes and weapons.

I didn’t even gone through all of that, it’s just gone?

[Hamless Hog]

Steam accounts/inventories cant be hacked. You did indeed leak your account information like you explained.

[Hamless Hog]

Originally posted by Maximus23333:

Originally posted by илья:

if you go to some sites, always check your Steam API key. They seem to have put the key on your account and so in the form of skins

I only entered my api key for bitskin and csfloat only for trading and they are reputable websites. If they are leaking the accounts then we all should be cautious. Steam should take some acts on it.

Like what?

[Asa]

Originally posted by Hogarth:

Steam accounts/inventories cant be hacked. You did indeed leak your account information like you explained.

Thing is, it is neither of those that scared me, but how they’ve managed to add a new device to my steam guard authenticator without me sending them any 2fa I have received. Password have probably not been leaked because myself can’t even remember, it only autofills on steams website. I do not know how they’ve managed to get access to my account.

[Hamless Hog]

Originally posted by Maximus23333:

Originally posted by Hogarth:

Steam accounts/inventories cant be hacked. You did indeed leak your account information like you explained.

Thing is, it is neither of those that scared me, but how they’ve managed to add a new device to my steam guard authenticator without me sending them any 2fa I have received. Password have probably not been leaked because myself can’t even remember, it only autofills on steams website. I do not know how they’ve managed to get access to my account.

You did send them your 2fa, when you signed into the scam site.

[Asa]

Originally posted by Hogarth:

Originally posted by Maximus23333:

Thing is, it is neither of those that scared me, but how they’ve managed to add a new device to my steam guard authenticator without me sending them any 2fa I have received. Password have probably not been leaked because myself can’t even remember, it only autofills on steams website. I do not know how they’ve managed to get access to my account.

You did send them your 2fa, when you signed into the scam site.

I could not because first, it’s through my sms, second I quit cs a while before the items are gone I didn’t sign in to anything since.

[Hamless Hog]

Originally posted by Maximus23333:

Originally posted by Hogarth:

You did send them your 2fa, when you signed into the scam site.

I could not because first, it’s through my sms, second I quit cs a while before the items are gone I didn’t sign in to anything since.

Wouldnt those sites you mention need your 2fa to set an api key?

[Asa]

Originally posted by Hogarth:

Originally posted by Maximus23333:

I could not because first, it’s through my sms, second I quit cs a while before the items are gone I didn’t sign in to anything since.

Wouldnt those sites you mention need your 2fa to set an api key?

No the 2fa as in the code necessary for them to get access to my steam guard. I didnt see it before but today when checking, I have an unknown device added to my steam guard the same day as they started to login to my steam account. It’s not through api because they logged into my steam account

[Asa]

https://imgur.com/a/PSgoqLz