Getting Hack attempts from overseas

[Temijin]

I keep getting attempts to hack my account from out of the USA. Mostly from China. I change my PW and that lasts about three to four weeks before they are at it again. I get the notice from Steam with the security code sent to my email. That is how I know. Is there a way to have steam block any log in attempts from outside the USA autocratically?

[Muppet among Puppets]

Is the right login name in the email?
And its not part of the email or your display name?

[crunchyfrog]

If you have publicised your email somewhere, then sure they're going to attempt it - you shouldn't worry if you have a decenty pasword and use two factor authentication.

They can keep trying but they won't get it unless you let them.

I get them from time to time on certain services with an email that I use. All I do is change my password again just to make sure.

[[N]ebsun]

引用自 crunchyfrog：

If you have publicised your email somewhere, then sure they're going to attempt it - you shouldn't worry if you have a decenty pasword and use two factor authentication.

You don't get a steam guard notification unless they have both the username and the password. Steam doesn't notify about incorrect password attempts.

引用自 Temijin：

I change my PW and that lasts about three to four weeks before they are at it again. I get the notice from Steam with the security code sent to my email.

Figure out how they are getting your password.
do you use the same password anywhere else ?
have you scanned for malware ?
have you logged into any site other than the official Steam site ?

[Kargor]

Also, is it a login, or a password change?

Login means they know your username/password, so it's on YOUR end to stop giving it away.

Make sure it's addressing the account that you think it addresses; the name in the mail is your account name, NOT the displayed user name. You might have made a different account at some point, so changing your password on one account isn't going to do anything to the other...

A password change request is harmless; just ignore it. Those are not even attacks.

[Space is the Place]

引用自 Temijin：

Is there a way to have steam block any log in attempts from outside the USA autocratically?

Voting for political parties that are against private companies being able to take your data and sell it to third parties whom don´t necessarily have the best secured servers so your data protection laws are akin to those of us Europeans.

[I>U]

Do you have a brother or sister (or whatever they are being called now) ussing the same PC?

Check your login history, just in case.
https://help.steampowered.com/en/accountdata/SteamLoginHistory

Maybe, he\she\it tried some funny bussiness on some skin-site? Ignore this post, if that's not being the case.

[sfrvr]

You should also check for External API's. I had this crap happen to me a week ago. First things first make sure that you check the most important security source and that's your Email Address.

Change your password to a non-dictionary one [Example: hdasHAhdSUdBAQ712#l,.] Add a Second Step Authenticator to it through it [We are still talking about your email fyi] After that step is done you will go to check if there is an infused API to your Steam account through a 3rd party accessed web page. After you do so your Steam account will be top notch security induced.

Check the Steam Reddit FAQ for more info on these things, there is also an API checker link included in the FAQ

https://www.reddit.com/r/Steam/wiki/scamtypes/


@I>U Mentioned an additional Login History check, make sure to do that one too.

[crunchyfrog]

引用自 Nebsun：

引用自 crunchyfrog：

If you have publicised your email somewhere, then sure they're going to attempt it - you shouldn't worry if you have a decenty pasword and use two factor authentication.

You don't get a steam guard notification unless they have both the username and the password. Steam doesn't notify about incorrect password attempts.

引用自 Temijin：

I change my PW and that lasts about three to four weeks before they are at it again. I get the notice from Steam with the security code sent to my email.

Figure out how they are getting your password.
do you use the same password anywhere else ?
have you scanned for malware ?
have you logged into any site other than the official Steam site ?

Wasn';t aware of that - thanks for letting me know.