What are these bots for?

[Eldin]

Someone sent me a friend request.
As soon as I accepted, they sent me an invite to play Call of Duty: Black Ops II - Zombies
I said that I don't have that game
Immediately after sending that message they invite me again.
Whatever message I send, i get invite to play that game as response.

Is that a bot or something?
And if it is a bot, what is its purpose?

[Wolf Knight]

if they are spamming you with invites, report the account thru its profile, block it, move on
possibly being used to try and get you to use a fake server to steal your account.

[PocketYoda]

Remove them.

[Eldin]

Originally posted by Wolf Knight:

if they are spamming you with invites, report the account thru its profile, block it, move on
possibly being used to try and get you to use a fake server to steal your account.

I unfriended them.
But if it's possible to get account stolen just by joining to a game, then it's a serious issue.
They invited me directly through Steam. They haven't sent any external links or anything.

[999999999]

Originally posted by Eldin:

But if it's possible to get account stolen just by joining to a game, then it's a serious issue.
They invited me directly through Steam. They haven't sent any external links or anything.

No. There is no way to get hijacked that way.

[Wolf Knight]

Originally posted by Eldin:

Originally posted by Wolf Knight:

if they are spamming you with invites, report the account thru its profile, block it, move on
possibly being used to try and get you to use a fake server to steal your account.

I unfriended them.
But if it's possible to get account stolen just by joining to a game, then it's a serious issue.
They invited me directly through Steam. They haven't sent any external links or anything.

they havent sent anything "yet". the end result is what matters, and getting that result has many different paths they can take. Download mod X, visit site Y, log into server Z, etc. somewhere along the line they get your guard down so you do something stupid before you realize it.

[Tesityr]

Originally posted by Eldin:

Originally posted by Wolf Knight:

if they are spamming you with invites, report the account thru its profile, block it, move on
possibly being used to try and get you to use a fake server to steal your account.

I unfriended them.
But if it's possible to get account stolen just by joining to a game, then it's a serious issue.
They invited me directly through Steam. They haven't sent any external links or anything.

If I may, you can't really get 'your account hijacked' just from the act of starting a game - but in some games, your information is viewable to them (IP address, which gives your location/country/etc and some other things) and they can use some of this information to try Phish your Account from there (they can 'fake' they are you to the Steam Servers, in attempts to try to Login, for example).

They can also just try to hack your computer remotely and install some Keyloggers, which would give them your Steam Login information (eventually.. they would have to wait and watch until you logged into Steam at some point), there are a bunch of things they could do with your system - but all of these things are very low chance of it happening, don't worry - not only is it difficult, Windows alone and your Modem and Internet Provider and also Steam, all have some good protections against these types of things occurring these days. I suggest getting the Steam Guard set up if you are really worried, but it is rare to have someone hack/acquire your account just from some game information.

Originally posted by Wolf Knight:

Originally posted by Eldin:

I unfriended them.
But if it's possible to get account stolen just by joining to a game, then it's a serious issue.
They invited me directly through Steam. They haven't sent any external links or anything.

they havent sent anything "yet". the end result is what matters, and getting that result has many different paths they can take. Download mod X, visit site Y, log into server Z, etc. somewhere along the line they get your guard down so you do something stupid before you realize it.

Also this ^ it's good that you didn't Chat with them much and/or follow any Links. It's a slippery slope to opening yourself up, just as he states...

HTH

[999999999]

Originally posted by Tesityr:

If I may, you can't really get 'your account hijacked' just from the act of starting a game - but in some games, your information is viewable to them (IP address, which gives your location/country/etc and some other things) and they can use some of this information to try Phish your Account from there (they can 'fake' they are you to the Steam Servers, in attempts to try to Login, for example).

What?

[Tesityr]

Originally posted by 999999999:

Originally posted by Tesityr:

If I may, you can't really get 'your account hijacked' just from the act of starting a game - but in some games, your information is viewable to them (IP address, which gives your location/country/etc and some other things) and they can use some of this information to try Phish your Account from there (they can 'fake' they are you to the Steam Servers, in attempts to try to Login, for example).

What?

Not sure what part you don't understand... Can you be more clear?

Many multiplayer games reveal your IP to the other players (they might have to sniff the packets to get them, but many just have it on display) - they can use the IP information to spoof talking to the Steam Servers and knock away at an Account (if they wanted). It wouldn't be fast or easy, but it is possible.

Does that help?

Edit:
I gtg soon so I'm sorry if I don't reply today, I'll try explain more later if you're Subscribed
also I have you ignored for some reason LOL

[999999999]

Originally posted by Tesityr:

Originally posted by 999999999:

What?

Not sure what part you don't understand... Can you be more clear?

Many multiplayer games reveal your IP to the other players (they might have to sniff the packets to get them, but many just have it on display) - they can use the IP information to spoof talking to the Steam Servers and knock away at an Account (if they wanted). It wouldn't be fast or easy, but it is possible.

Does that help?

Edit:
I gtg soon so I'm sorry if I don't reply today
also I have you ignored for some reason LOL

Without any actual account credentials to gain access to the account, no. Brute forcing into an account would be nearly impossible, also subjected to the many cooldowns for failed attempts and you have to remember about Guard.

[Tesityr]

Originally posted by 999999999:

Originally posted by Tesityr:

Not sure what part you don't understand... Can you be more clear?

Many multiplayer games reveal your IP to the other players (they might have to sniff the packets to get them, but many just have it on display) - they can use the IP information to spoof talking to the Steam Servers and knock away at an Account (if they wanted). It wouldn't be fast or easy, but it is possible.

Does that help?

Edit:
I gtg soon so I'm sorry if I don't reply today
also I have you ignored for some reason LOL

Without any actual account credentials to gain access to the account, no. Brute forcing into an account would be nearly impossible, also subjected to the many cooldowns for failed attempts and you have to remember about Guard.

Exactly. I'm a bit tired, but I was thinking Keyloggers would get the Login (easier to hack a home system than to hack into Steamu - remember the IP was acquired via the game), or if they knew what they were doing, they could sniff the Credentials as well.
Brute forcing is actually successful still these days, once you automate it, even with Cooldowns - remember all of these things don't stop hackers, only slow them down.
(I tell people at work and that ask, to use LONG passphrases, NOT complex ones, as the length is what really stumps hackers (for BF anyway))
Yes I suggested Steam Guard because authenticators work pretty well too - although a logger/sniffer on their network (IP gained from the game) bypasses some of that, all you need is a remote of the display then you see the timed keycode as well - this is all on the user system/LAN, not Steam Servers of course.

I still say "don't worry about it too much" and "Steam Guard if worried" though, don't get me wrong - the amount of effort needed to do all this (esp. with SG) would probably be directed more at businesses/brokers than a home user for some Steam games/Accounts.

Edit:
Why do I have you Blocked? lol
Are you mean to people?

[999999999]

Originally posted by Tesityr:

Originally posted by 999999999:

Without any actual account credentials to gain access to the account, no. Brute forcing into an account would be nearly impossible, also subjected to the many cooldowns for failed attempts and you have to remember about Guard.

Exactly. I'm a bit tired, but I was thinking Keyloggers would get the Login (easier to hack a home system than to hack into Steamu - remember the IP was acquired via the game), or if they knew what they were doing, they could sniff the Credentials as well.
Brute forcing is actually successful still these days, once you automate it, even with Cooldowns - remember all of these things don't stop hackers, only slow them down.
Yes I suggested Steam Guard because authenticators work pretty well too - although a logger/sniffer on their network (IP gained from the game) bypasses some of that, all you need is a remote of the display then you see the timed keycode as well - this is all on the user system/LAN, not Steam Servers of course.

I still say "don't worry about it too much" and "Steam Guard if worried" though, don't get me wrong - the amount of effort needed to do all this (esp. with SG) would probably be directed more at businesses/brokers than a home user for some Steam games/Accounts.

So, the answer to what I originally quoted is no. Got it.

No downloading, clicking on anything = nothing going to happen.

[Tesityr]

Originally posted by 999999999:

Originally posted by Tesityr:

Exactly. I'm a bit tired, but I was thinking Keyloggers would get the Login (easier to hack a home system than to hack into Steamu - remember the IP was acquired via the game), or if they knew what they were doing, they could sniff the Credentials as well.
Brute forcing is actually successful still these days, once you automate it, even with Cooldowns - remember all of these things don't stop hackers, only slow them down.
Yes I suggested Steam Guard because authenticators work pretty well too - although a logger/sniffer on their network (IP gained from the game) bypasses some of that, all you need is a remote of the display then you see the timed keycode as well - this is all on the user system/LAN, not Steam Servers of course.

I still say "don't worry about it too much" and "Steam Guard if worried" though, don't get me wrong - the amount of effort needed to do all this (esp. with SG) would probably be directed more at businesses/brokers than a home user for some Steam games/Accounts.

So, the answer to what I originally quoted is no. Got it.

No downloading, clicking on anything = nothing going to happen.

I would be careful with that attitude... You can be hacked right now, just being connected to da interwebz, without you clicking on anything or downloading anything. You could even have a dormant Troj waiting on something on your system right now and you would never even know it. I take it you don't work in IT?

Edit:
Remember, it is always a non-zero probability of getting hacked or messed with, just from having that plug/wifi connected to your system. Don't lose sleep over it, but it is there, always. Backup data you treasure, regularly.

[999999999]

Originally posted by Tesityr:

Originally posted by 999999999:

So, the answer to what I originally quoted is no. Got it.

No downloading, clicking on anything = nothing going to happen.

I would be careful with that attitude... You can be hacked right now, just being connected to da interwebz, without you clicking on anything or downloading anything. You could even have a dormant Troj waiting on something on your system right now and you would never even know it. I take it you don't work in IT?

Not really, no.

This PC plays on Steam and Steam alone.

I take it you think everyone is just a fool and you are the high and mighty that knows everything, correct?

Originally posted by Tesityr:

Edit:
Remember, it is always a non-zero probability of getting hacked or messed with, just from having that plug/wifi connected to your system. Don't lose sleep over it, but it is there, always. Backup data you treasure, regularly.

Non issue.

[Tesityr]

Originally posted by 999999999:

Originally posted by Tesityr:

I would be careful with that attitude... You can be hacked right now, just being connected to da interwebz, without you clicking on anything or downloading anything. You could even have a dormant Troj waiting on something on your system right now and you would never even know it. I take it you don't work in IT?

Not really, no.

This PC plays on Steam and Steam alone.

I take it you think everyone is just a fool and you are the high and mighty that knows everything, correct?

Ah, I see why you are Ignored now.... I was trying to help with some cautious thinking and that is "high and mighty" to you, eh? Got it.

I won't be clicking on "Show" to see what you say anymore, just so you know.