Trading Cards stolen

[Ginormica]

Hi guys! About an hour ago, I received some e-mail regarding some payments. They were all in Chinese, so I had no idea what they were about. Except for the few lines that were 0.1 euro, 0.6 euro, 0.3 euro, etc. Then in the last mail there is -0.19 eur. So, with some help from my friend Google, I was able to translate those emails. Apparently someone somehow managed to sell my trading cards from Outlast II and Stray. How the heck did that happen, Steam? I have enabled my Steam Guard on my phone after someone hacked my Rockstar account and I could not play GTA V anymore. Now this? What is the point of all these security measures if none of them work? After changing my password, I can no longer access my PC app. Now I can't play any game. THANK GOD I HAVE NOT SPENT THAT MUCH MONEY ON YOU, STEAM! You've got that Steam Guard app for the phone, and it is useless! THANK YOU! THANK YOU!

[Unn4m3d (♥AUT♥)]

Follow these Steps:

1. Scan for malware https://www.malwarebytes.com/
2. Deauthorize all other devices https://store.steampowered.com/twofactor/manage
3. Change passwords from a clean computer
4. Generate new backup codes for your Mobile App https://store.steampowered.com/twofactor/manage
5. Revoke the API key https://steamcommunity.com/dev/apikey (there should be nothing in the API Key)

Originally posted by LaurentiuCM:

How the heck did that happen, Steam? I have enabled my Steam Guard on my phone

Because you gave out your account information on some Scam site, including the Steam Guard code. Nobody hacks Steam accounts.
You can have as many locks as you want on your house, if you give away all the keys to a burglar he will still break in and take everything. Which is exactly what happened here.

[Ragna]

Literally same thing happened with me. Got like 100+ emails that were all in chinese. All my cards and various in-game items are all gone D:

[Ginormica]

Originally posted by Unn4m3d (♥AUT♥):

Follow these Steps:

1. Scan for malware https://www.malwarebytes.com/
2. Deauthorize all other devices https://store.steampowered.com/twofactor/manage
3. Change passwords from a clean computer
4. Generate new backup codes for your Mobile App https://store.steampowered.com/twofactor/manage
5. Revoke the API key https://steamcommunity.com/dev/apikey (there should be nothing in the API Key)

Originally posted by LaurentiuCM:

How the heck did that happen, Steam? I have enabled my Steam Guard on my phone

Because you gave out your account information on some Scam site, including the Steam Guard code. Nobody hacks Steam accounts.
You can have as many locks as you want on your house, if you give away all the keys to a burglar he will still break in and take everything. Which is exactly what happened here.

Do you really think I gave any information anywhere? Come one now... After that incident with GTA V, I took every step to make my account safer. I've changed my pass and enabled my Steam Guard. If I try to connect on another device, even if I know the codes, I still have to give that device access from my app. So, even if someone has all my codes they would need to have my own phone in their hands. So, how do you explain that? Stop defending them. Anyway, now I can log in again. I really hope this will not happen to anyone ever again.

[FFL2and3rocks]

Originally posted by LaurentiuCM:

Do you really think I gave any information anywhere?

Yes.

Originally posted by LaurentiuCM:

If I try to connect on another device, even if I know the codes, I still have to give that device access from my app. So, even if someone has all my codes they would need to have my own phone in their hands. So, how do you explain that?

They don't need your phone. When their bot tries to log into your account, you authorize it by giving them your Steam Guard code when they ask you for it.

[J4MESOX4D]

Originally posted by LaurentiuCM:

Originally posted by Unn4m3d (♥AUT♥):

Follow these Steps:

1. Scan for malware https://www.malwarebytes.com/
2. Deauthorize all other devices https://store.steampowered.com/twofactor/manage
3. Change passwords from a clean computer
4. Generate new backup codes for your Mobile App https://store.steampowered.com/twofactor/manage
5. Revoke the API key https://steamcommunity.com/dev/apikey (there should be nothing in the API Key)






Because you gave out your account information on some Scam site, including the Steam Guard code. Nobody hacks Steam accounts.
You can have as many locks as you want on your house, if you give away all the keys to a burglar he will still break in and take everything. Which is exactly what happened here.

Do you really think I gave any information anywhere? Come one now... After that incident with GTA V, I took every step to make my account safer. I've changed my pass and enabled my Steam Guard. If I try to connect on another device, even if I know the codes, I still have to give that device access from my app. So, even if someone has all my codes they would need to have my own phone in their hands. So, how do you explain that? Stop defending them. Anyway, now I can log in again. I really hope this will not happen to anyone ever again.

Of course you did. You allowed your credentials to be phished and then the hijackers listed your cheap items which don't require confirmation based on median rate. If you give away your login name, password and live auth code to a phishing window then your account will be wholly compromised and Steam Guard wont be able to help you. It's just an extra security layer - it doesn't magically protect you from being hijacked.

[Kuvi]

I HAVE EXACTLY THE SAME PROBLEM!!
some ♥♥♥♥♥♥♥ chinese ♥♥♥♥♥♥♥ stole all i had in my eq. i dont ♥♥♥♥♥♥♥ know how because i have steamguard and allat. i wasnt clicking in suspicious links or sum. if someone can help, please contact me

[Unn4m3d (♥AUT♥)]

Originally posted by LaurentiuCM:

Do you really think I gave any information anywhere?

I dont just think that, I know that. You may not be aware of whatever site you logged in being a Scam Site, but it was. There's literally no other way for them to get in if you use 2FA.

Originally posted by Kuvi:

I HAVE EXACTLY THE SAME PROBLEM!!
some ♥♥♥♥♥♥♥ chinese ♥♥♥♥♥♥♥ stole all i had in my eq. i dont ♥♥♥♥♥♥♥ know how because i have steamguard and allat. i wasnt clicking in suspicious links or sum. if someone can help, please contact me

I literally wrote everything you need in my post already. Just READ and follow the steps, and stop giving out your information. And yes, you DID use your account information somewhere. You can refuse that fact, but it remains true.

[Kuvi]

Originally posted by Unn4m3d (♥AUT♥):

Originally posted by LaurentiuCM:

Do you really think I gave any information anywhere?

I dont just think that, I know that. You may not be aware of whatever site you logged in being a Scam Site, but it was. There's literally no other way for them to get in if you use 2FA.

Originally posted by Kuvi:

I HAVE EXACTLY THE SAME PROBLEM!!
some ♥♥♥♥♥♥♥ chinese ♥♥♥♥♥♥♥ stole all i had in my eq. i dont ♥♥♥♥♥♥♥ know how because i have steamguard and allat. i wasnt clicking in suspicious links or sum. if someone can help, please contact me

I literally wrote everything you need in my post already. Just READ and follow the steps, and stop giving out your information. And yes, you DID use your account information somewhere. You can refuse that fact, but it remains true.

what if i wasnt clicking anything? only thing i was doing last days was watching yt. i were never logged to some case oppener by steam or anything suspicious. i have already done what you have wrote in previous post, but will it help not getting hacked agine? worth to notice, i havent got any e mail that someone was logged into my account. how no confirmation was send by steam that someone is logging into my acc?

[Maria]

That means they got in earlier.

Or you got malware on your PC

[Mr. Smiles]

Hijackers can and will sit on accounts they have access to for days, months, or longer before they choose to empty them out.

What you have been doing recently is irrelevant.

Do the steps.

[J4MESOX4D]

Originally posted by Kuvi:

Originally posted by Unn4m3d (♥AUT♥):

I dont just think that, I know that. You may not be aware of whatever site you logged in being a Scam Site, but it was. There's literally no other way for them to get in if you use 2FA.




I literally wrote everything you need in my post already. Just READ and follow the steps, and stop giving out your information. And yes, you DID use your account information somewhere. You can refuse that fact, but it remains true.

what if i wasnt clicking anything? only thing i was doing last days was watching yt. i were never logged to some case oppener by steam or anything suspicious. i have already done what you have wrote in previous post, but will it help not getting hacked agine? worth to notice, i havent got any e mail that someone was logged into my account. how no confirmation was send by steam that someone is logging into my acc?

Why would you get confirmation when your credentials were successfully entered including a live auth code into a client or the browser? Somewhere along the lines previous you allowed your login credentials to be captured so think of the third party logins you've used and go from there.

[StarNinja]

Originally posted by Ragnarok:

Literally same thing happened with me. Got like 100+ emails that were all in chinese. All my cards and various in-game items are all gone D:

Literally just happened to me last night too.

[Ragna]

Got in contact with steam's support team. To literally no ones surprise, they're not gonna do a damn thing. Zero refunds, zero compensation, zero reimbursement.

[Crazy Tiger]

Originally posted by Ragnarok:

Got in contact with steam's support team. To literally no ones surprise, they're not gonna do a damn thing. Zero refunds, zero compensation, zero reimbursement.

That shouldn't be a surprise. The restoration policy is quite clear about that: : https://support.steampowered.com/kb_article.php?ref=9958-MJDG-3003

You can thank your fellow gamers for that, mind. In the past Valve did duplicate items, for example, but people abused that of course. So Valve took a harder line.

People being people is why we can't have nice things.

[Unn4m3d (♥AUT♥)]

Originally posted by Ragnarok:

Got in contact with steam's support team. To literally no ones surprise, they're not gonna do a damn thing. Zero refunds, zero compensation, zero reimbursement.

Yes, good job on being part of the reason why people have to wait multiple days for their Support ticket. Your ticket was a complete waste, and everything you needed to know about it was very much available to you, as Crazy Tiger mentioned.