[SOLVED] Steam Account was Hacked: was it remote access?

[the1stbrisme]

So last night my steam account was accessed.

I have it back now and everything is fine, but I'm kind of worried how this happened. I previously had the account linked to a Yahoo email. I have since deleted my yahoo email and made a new email and changed ALL of my website passwords and emails to the new one. I have done a full scan of my files with windows defender.

How likely is it that a hacker has direct access to my computer?

I'm thinking it must have been an information leak with yahoo for my login info, or even some kind of bug within steam since I see someone else had their account stolen a few posts below me.

If anyone can shed some light on whether or not I need to qorry about remote access to my computer that would be great. There has been no suspicious activity on my computer and no threats were found with a full file scan.

[cSg|mc-Hotsauce]

Steam has no bug where this info could be released. Ever.

[the1stbrisme]

Nguyên văn bởi cSg|mc-Hotsauce:

Steam has no bug where this info could be released. Ever.

:qr:

So does that mean they remote accessed my computer? I scanned my computer but it said no threats. I'm just not sure what to do. There has never been any suspicious activity on my computer either. What should I do to make sure I'm safe?

[cSg|mc-Hotsauce]

https://haveibeenpwned.com/

[Winged One]

have you been using any 3rd party trade sites?


as for it being remote access, have you actually setup RDP or have any software capable of Unattended access installed (Teamviewer for example)? because those would be the most common forms of remote access, and actual RAT's are relatively uncommon these days

[the1stbrisme]

Nguyên văn bởi theseraph1:

have you been using any 3rd party trade sites?


as for it being remote access, have you actually setup RDP or have any software capable of Unattended access installed (Teamviewer for example)? because those would be the most common forms of remote access, and actual RAT's are relatively uncommon these days

What is a third party trade site? I only dowload free games from steam,and I bought some games during the sale. I don't dowload games from other sites. I don't have RDP (I don't know what that is) I don't have team viewer.

[the1stbrisme]

Nguyên văn bởi theseraph1:

have you been using any 3rd party trade sites?


as for it being remote access, have you actually setup RDP or have any software capable of Unattended access installed (Teamviewer for example)? because those would be the most common forms of remote access, and actual RAT's are relatively uncommon these days

Is it safe to say I haven't been remote accessed? I think the breach may have somehow happened with my yahoo email. My yahoo email was always filled with so much spam that it wasn't even useable. There was also an increase in these types of emails as of late. I normally didn't click on them, but I remember a while back yahoo had a breach, and I had my steam account during that time.

[Dr.Shadowds 🐉]

Steam isn't hacked. Do you have more than one person that use on the same PC?

1. You need to scan your system for any malware/virus.
https://www.malwarebytes.com

2. I suggest change the password on all your things, I suggest do this on a secure device.

- Never share any details with anyone. Especially never share online, or any through any service as it may not be secure.

- Don't sign up for random sites, and using same password for everything.

- Never login from 3rd party sites, and watch where you go, as people setup scam sites that look like the login pages to try, and fool you.

- Don't use public devices, such as cyber cafes, Library, or etc... They may have keyloggers.

- If you have more than one person that use your device, I suggest keep an eye. Also inform them as well as they may face the same problem.

3. Check your account for any pending trades you want to cancel, any API you want to remove, and revoke all devices as well, so no one has access to your account.

I recommend adding 2FA to your account.
https://store.steampowered.com/mobile

[the1stbrisme]

Nguyên văn bởi Dr.Shadowds 🐉:

Steam isn't hacked. Do you have more than one person that use on the same PC?

1. You need to scan your system for any malware/virus.
https://www.malwarebytes.com

2. I suggest change the password on all your things, I suggest do this on a secure device.

- Never share any details with anyone.

- Don't sign up for random sites, and using same password for everything.

- Never login from 3rd party sites, and watch where you go, as people setup scam sites that look like the login pages to try, and fool you.

- Don't use public devices, such as cyber cafes, Library, or etc... They may have keyloggers.

- If you have more than one person that use your device, I suggest keep an eye. Also inform them as well as they may face the same problem.

3. Check your account for any pending trades you want to cancel, any API you want to remove, and revoke all devices as well, so no one has access to your account.

I went through and did all of this last night stayed up until 4 AM frantically changing over everything and creating new difficult password sfor each site.

BUT do you know about the yahoo email hack? My account was attached to my previous yahoo email (now deleted). I believe that my info was taken during the 2013-2014 hack and sold online and maybe somone is just getting to it now. Because the main people involved were russian hackers and my account was stolen by someone who was russian. I feel like my computer is safe though. I will do the malware bytes and the final check.

No one else uses my computer. I normally have a few secure websites I go to. I don't venture off from my few. Thanks!

[the1stbrisme]

Nguyên văn bởi Dr.Shadowds 🐉:

Steam isn't hacked. Do you have more than one person that use on the same PC?

1. You need to scan your system for any malware/virus.
https://www.malwarebytes.com

2. I suggest change the password on all your things, I suggest do this on a secure device.

- Never share any details with anyone. Especially never share online, or any through any service as it may not be secure.

- Don't sign up for random sites, and using same password for everything.

- Never login from 3rd party sites, and watch where you go, as people setup scam sites that look like the login pages to try, and fool you.

- Don't use public devices, such as cyber cafes, Library, or etc... They may have keyloggers.

- If you have more than one person that use your device, I suggest keep an eye. Also inform them as well as they may face the same problem.

3. Check your account for any pending trades you want to cancel, any API you want to remove, and revoke all devices as well, so no one has access to your account.

I recommend adding 2FA to your account.
https://store.steampowered.com/mobile

I'm mainly focusing on this becasue I'm trying to figure out how my account was accessed. I've been doing the same things on my computer for years. The only explanation has to be the yahoo hack becasuse so far nothing is showing as threatened. I don't know why I didn't cancel my yahoo email back when it happened, but I have now.

[Dr.Shadowds 🐉]

I would suggest ensure to look into your yahoo account, and see if it was compromise.

Also I would suggest this, make a new main email account, maybe with outlook, or Gmail, add a 2fa it as well, and only use that email for your important things like your PayPal, banking, bills, and game accounts such as Steam, GOG, or etc... This way your less likely to get spams in the mail, and only the important services would know your email.

[cSg|mc-Hotsauce]

So, not going to check the site I linked?

[the1stbrisme]

Nguyên văn bởi Dr.Shadowds 🐉:

I would suggest ensure to look into your yahoo account, and see if it was compromise.

Also I would suggest this, make a new main email account, maybe with outlook, or Gmail, add a 2fa it as well, and only use that email for your important things like your PayPal, banking, bills, and game accounts such as Steam, GOG, or etc... This way your less likely to get spams in the mail, and only the important services would know your email.

Thank you. I actually remember that way back when i recieved an email from yahoo about the breach and I thought all I had to do was change my password. I didn't realize they still have already gotten who knows what. I did the malwarebytes and 0 threats found. I have already deleted my yahoo account and moved everything over to my new email. I think it was just stolen info from that previous yahoo breach. I have changed ALL passwords and made a new email. All the passwords are now unique.

[the1stbrisme]

Nguyên văn bởi cSg|mc-Hotsauce:

So, not going to check the site I linked?

:qr:

I didn't feel safe clicking the link. I normally don't click random link. Even Dr Shadows link, I didn't click. I simply searched malware bytes in my own browser.

[cSg|mc-Hotsauce]

It is the same link the Global mod Tito links to users. If it were shady, I don't think he would post it.

Nguyên văn bởi Tito Christmas:

And if you've ever used that same email anywhere else:
https://haveibeenpwned.com/

https://steamcommunity.com/discussions/forum/0/1744480966992572610/#c1744480966992850066

[the1stbrisme]

Nguyên văn bởi cSg|mc-Hotsauce:

It is the same link the Global mod Tito links to users. If it were shady, I don't think he would post it.

https://steamcommunity.com/discussions/forum/0/1744480966992572610/#c1744480966992850066

:qr:

Do you think that malwarebytes would definitely catch it if it were malware? Everything is showing 0 threats but the only thing that was definitely compromised at some point was my yahoo email.