Catch $50 Scam message

[roJ]

Somehow this scam message with fake steam link got sent out of my account to all my friends. It says "Catch 50$" and then a fake steam link. Is this a virus? I didn't even send the message. I woke up with like 5 replies of people being mad at me. Should I do something about it?

[DarkCrystalMethod]

Confirm by re-opening the chat window with your friends if it was your account that sent the message. People can change their screen name, profile pic and summary(not much else) but it might look like your account but their steamID is different.
Anyway, if it was somehow your account there's a guide floating around with ALL the steps...

From what I remember...
1. do a full virus scan(to make sure windows isn't compromized by a virus)
2. check your network/router to make sure nobody else is on your network that shouldn't be
3. turn on Steam Guard
4. ???
5. PROFIT!

Good luck

[peppermint hollows]

Yes, you should do something about it if you care about your account's security. At some point in time you were phished and put your login details to a scam site.

Steps to take NOW:
1. Scan for malware https://www.malwarebytes.com/
2. Deauthorize all other devices https://store.steampowered.com/twofactor/manage
3. Change passwords from a trusted/clean device.
4. Generate new backup codes for your Mobile App https://store.steampowered.com/twofactor/manage
5. Revoke the API key https://steamcommunity.com/dev/apikey (there should be nothing in the APIKEY)

Common scams to look out for in the future (this applies to both Steam and Discord):
-ANY 3rd party website which asks for your Steam login details
-Strangers (or friends) offering you a giftcard that requires you to follow a link and login to a website
-Strangers (or friends) telling you to go vote for a competitive team and sending a link to go do so
-Anyone claiming to be a Steam/Valve admin or Support member
-Anyone claiming they "accidentally" reported your account

If you fell for any of the above scams, you were phished. This does not cover EVERY scam, but it does cover some of the most common ones.

[roJ]

Thank you! I have always had Steam Guard two factor authentication on. So should I keep it or remove it? I got confused now. I also did a full virus scan and everything is ok. Generated new backup codes and revoked the API key.

[peppermint hollows]

Keep two factor authentication on.

[roJ]

I deauthorized all the other devices, like you said, but now my Steam App is bugging. Never sends me a confirmation when I'm logging in, I have to use Steam Guard code. I also can't change my password, because it requires to go to confirmations menu which I can't access because the whole app won't load anything besides steam guard codes. Thoughts? I also can't sign out of the app because it has two factor authentication enabled.

[roJ]

Also, even if I got phished, and scammers somehow have my login information, how do the scammers login and send that message without me confirming it through mobile app?

[Chill-Out-Zone]

You have installed something you shouldn't.
Make a clean install and keep 2FA on steam.
GL

[宇🌸LARA🦄SOULS🌸LIKE]

maybe ur account has been compromised

[MadZec]

I got those and had account stolen, luckly steam support got me account back.
As soon as he got access to my account in one minute he removed authenticator, changed pass, and changed user name with his script.

Be aware often when link is sent he will use some of your friends nickname and link will look like it is from steam but it will be something li "staem" or "stame" and those variations.
Also he erased my whole friend list.

[Sweex]

I had the same problem. My friends from discord hit me up and told me some random hacker was in my account sending this link to my friends. I guess this is happening to some of yall too.

[cSg|mc-Hotsauce]

Originalmente postado por Sweex:

I had the same problem. My friends from discord hit me up and told me some random hacker was in my account sending this link to my friends. I guess this is happening to some of yall too.

Nope. I don't give away my account info so they can hijack my account.

[a big wet spider]

This happened to me also, 2FA was enabled etc. Deauth all websites using your steam key, I believe some websites that utilise steam API have been compromised. as for how they are using it to send message via steam chat i am unsure.

steam pls fix

[J4MESOX4D]

Originalmente postado por a big wet spider:

This happened to me also, 2FA was enabled etc. Deauth all websites using your steam key, I believe some websites that utilise steam API have been compromised. as for how they are using it to send message via steam chat i am unsure.

steam pls fix

No, it's the people giving away their credentials to these 3rd party websites which allow them to be phished and then the scammers can simply bot messages from the accounts they hijack using scripts.

[RandomGamePlayer]

Originalmente postado por peppermint hollows:

Yes, you should do something about it if you care about your account's security. At some point in time you were phished and put your login details to a scam site.

Steps to take NOW:
1. Scan for malware https://www.malwarebytes.com/
2. Deauthorize all other devices https://store.steampowered.com/twofactor/manage
3. Change passwords from a trusted/clean device.
4. Generate new backup codes for your Mobile App https://store.steampowered.com/twofactor/manage
5. Revoke the API key https://steamcommunity.com/dev/apikey (there should be nothing in the APIKEY)

Common scams to look out for in the future (this applies to both Steam and Discord):
-ANY 3rd party website which asks for your Steam login details
-Strangers (or friends) offering you a giftcard that requires you to follow a link and login to a website
-Strangers (or friends) telling you to go vote for a competitive team and sending a link to go do so
-Anyone claiming to be a Steam/Valve admin or Support member
-Anyone claiming they "accidentally" reported your account

If you fell for any of the above scams, you were phished. This does not cover EVERY scam, but it does cover some of the most common ones.

thank you thank you

[DarkCrystalMethod]

You probably didn't intend that link to be clickable. Please adjust so nobody's computer gets eaten.