Friend's account got stolen with mobile authenticator.

[Chef]

Two days ago he woke up, tried to log in to his steam account, but the passowrd had been changed, even though he has his mobile authenticator enabled. What's up with that?

[Theblaze]

You should ask him.

Accounts don't get hijacked especially with SGMA enabled without the user doing something wrong.

[J4MESOX4D]

He most likely entered his credentials into a fake Steam site or scam site. That or he gave away his credentials another way. The mobile authenticator is a seperate independent device but is still vulnerable if the end user is reckless.

[KennyS]

yes

[Chef]

Originally posted by J4MESOX4D:

He most likely entered his credentials into a fake Steam site or scam site. That or he gave away his credentials another way. The mobile authenticator is a seperate independent device but is still vulnerable if the end user is reckless.

I really hope it was a mistake on his end then, because if that can happen to anybody it's kinda scary.

[Chef]

Originally posted by ♠你好血¥HyroShy♠:

yes

you're pathetic.

[J4MESOX4D]

Originally posted by OxygenSmuggler:

Originally posted by J4MESOX4D:

He most likely entered his credentials into a fake Steam site or scam site. That or he gave away his credentials another way. The mobile authenticator is a seperate independent device but is still vulnerable if the end user is reckless.

I really hope it was a mistake on his end then, because if that can happen to anybody it's kinda scary.

The mobile authenticator is an entirely seperate entity from the account name and password on a individual device so the only way it can be compromised is if the user gives his credentials away or both his PC and phone becomes compromised simutaneosly with tailored infections. Either way, that would be the end users responsibility and fault regardless.

A lot of users are getting hijacked because they are being careless in using random 3rd party sites or fake Steam ones. Rest assured the mistake is on his end no matter how he was compromised.

[Dr.Shadowds 🐉]

Originally posted by OxygenSmuggler:

Originally posted by J4MESOX4D:

He most likely entered his credentials into a fake Steam site or scam site. That or he gave away his credentials another way. The mobile authenticator is a seperate independent device but is still vulnerable if the end user is reckless.

I really hope it was a mistake on his end then, because if that can happen to anybody it's kinda scary.

Rest assured, only way to get hijack with SGMA enabled, has always been user end problem.

A. They gave their details away to someone, or to a 3rd party / fake site.

B. Their devices has been compromise, which they should scan for virus, reformat the devices if have to, and change passwords, and redo the authenticators.

[The Ancient Mariner]

ahhahah dumb friend

[Chef]

Originally posted by 50 Shades of Gabe:

ahhahah dumb friend

i guess so.

[Chef]

Originally posted by Dr.Shadowds 🐉:

Originally posted by OxygenSmuggler:

I really hope it was a mistake on his end then, because if that can happen to anybody it's kinda scary.

Rest assured, only way to get hijack with SGMA enabled, has always been user end problem.

A. They gave their details away to someone, or to a 3rd party / fake site.

B. Their devices has been compromise, which they should scan for virus, reformat the devices if have to, and change passwords, and redo the authenticators.

Alright thanks.

[Seraphita]

The only way to get hijached in general is always on the user end. I've seen enough people who does something they should not and then complain about it on forums. My point is only that it is rarely if not never the fault of steam. Users need to realize how imporant it is to be careful...