Steam security problem

[NEO]

Starting with the beginning. In the past 2 days someone with russian email trying to steal my account, like requesting my mobile authenticator to be removed and e-mail to be changed. I don't think it's possible, right? Anyway, what should i do in this case?

[SVaughan]

Just block and report them. As long as you're not giving them your info, they can't do anything to you.

[NEO]

Publicado originalmente por SVaughan:

Just block and report them. As long as you're not giving them your info, they can't do anything to you.

Info like what? Seen in that support ticket which i can't find it in list btw, that it gaved an old address of mine and some paypal old id. I did scanned my PC for possible keylogger or viruses, and nothing.

[SLG]

So you get a notification that someone tried to log into your account or change the information? If yes, how did you receive the notification?

[NEO]

Publicado originalmente por SLGray:

So you get a notification that someone tried to log into your account or change the information? If yes, how did you receive the notification?

Not trying to log-in, but it's an assistance ticket (with a number), where someone with a russian mail tries to request an e-mail change and the removal of my authenticator with the excuse of "mail not working and steam guard mobile app stopped working", then it provided a name, an address and some paypal old ID, then a reply came from someone from the staff asking to further provide some infos, like an image with a full CD key received from an online retailer.

Is my account in danger?

[[N]ebsun]

Email can be sent from anyone - did you check it really is from Steam ?

If it is really from Steam, then change password and secure the account etc.

[NEO]

Publicado originalmente por Nebsun:

Email can be sent from anyone - did you check it really is from Steam ?

If it is really from Steam, then change password and secure the account etc.

The support e-mail was from steam. And i did changed password the first i've seen that attempt at steam support to change my email and remove mobile authenticator.
As i told, the one that attempted to steal my account provided a name, an address and a paypal id, then the steam support requested a cd key screenshot from a retailer from where a game from the library was bought. i don't think that can be possible, since my e-mail and steam account are not breached, but still, i'm just concerned about this attempt of that possible hacker of w/e is tried this method of stealing.

[NuLife]

Publicado originalmente por NEO:

Publicado originalmente por Nebsun:

Email can be sent from anyone - did you check it really is from Steam ?

If it is really from Steam, then change password and secure the account etc.

The support e-mail was from steam. And i did changed password the first i've seen that attempt at steam support to change my email and remove mobile authenticator.
As i told, the one that attempted to steal my account provided a name, an address and a paypal id, then the steam support requested a cd key screenshot from a retailer from where a game from the library was bought. i don't think that can be possible, since my e-mail and steam account are not breached, but still, i'm just concerned about this attempt of that possible hacker of w/e is tried this method of stealing.

Where did steam support contact u BTW, even tho that is not steam support, by what u said, makes no sense why support would ask for a a key when they can find out without u telling them (:

[NEO]

Publicado originalmente por NuLife:

Publicado originalmente por NEO:

The support e-mail was from steam. And i did changed password the first i've seen that attempt at steam support to change my email and remove mobile authenticator.
As i told, the one that attempted to steal my account provided a name, an address and a paypal id, then the steam support requested a cd key screenshot from a retailer from where a game from the library was bought. i don't think that can be possible, since my e-mail and steam account are not breached, but still, i'm just concerned about this attempt of that possible hacker of w/e is tried this method of stealing.

Where did steam support contact u BTW, even tho that is not steam support, by what u said, makes no sense why support would ask for a a key when they can find out without u telling them (:

Contacted me on mail. The website is the real one. And maybe the support asked for some infos, like personal address, name, paypal id, even some cd key screenshot as a proof, since that hacker requested the mobile authenticator to be removed and a change of e-mail.

[NuLife]

Publicado originalmente por NEO:

Publicado originalmente por NuLife:

Where did steam support contact u BTW, even tho that is not steam support, by what u said, makes no sense why support would ask for a a key when they can find out without u telling them (:

Contacted me on mail. The website is the real one. And maybe the support asked for some infos, like personal address, name, paypal id, even some cd key screenshot as a proof, since that hacker requested the mobile authenticator to be removed and a change of e-mail.

Just don't respond they wouldn't ask u for info out the blue and support don't contact u through email^^

[JPMcMillen]

If you are really worried that your account may be compromised check to make sure there is nothing listed for your API key: https://steamcommunity.com/dev/apikey
If there is anything there, revoke them and do the following

How to secure your account if your login credentials have been compromised:

Important: Don't trade anything until you have followed all the below steps.

• Scan for malware https://www.malwarebytes.com/
  
• Deauthorize all other devices https://store.steampowered.com/twofactor/manage
  
• Change passwords from a clean computer
  
• Revoke the API key https://steamcommunity.com/dev/apikey
  
• Generate new backup codes