Unauthorized attempts to gain access to my account?

[Spartan-087]

Over past week someone from Russian IP tried to get onto my steam, after 1st one i changed my password, 3 days later they tried again T_T. The 2nd password was new and not something i used before, i use vpn but i never use it with Russian servers so its definitely wasnt me. I have now reset all passwords again, signed out every device, and scanned my pc for keyloggers(nothing), will wait and see, but still how the heck did they manage to get my password in 3 days.

[JPMcMillen]

Have you made sure to remove any API keys that may be on your Steam account?

Also, I'm assuming you are getting Steam Guard emails from these attempts. Make sure that they actually contain the correct login name in the email. Sometimes those emails are actually phishing scams to try and get you to click on a link to take you to a fake Steam login page so they can get a bot latched onto your account.

[Spartan-087]

Oh ♥♥♥♥ u are right, they changed a name a little

[Cray]

Escrito originalmente por Spartan-087:

Oh ♥♥♥♥ u are right, they changed a name a little

So it was in fact fake like JPCMcMillen said?

Since it's relevant: Never use your steam rig to login to your email, have a separate device for that, preferably one that you don't use for much else (the less, the better).

People have carelessly responded to stolen logins by opening their email from the same device that was comprimised, and then it's pretty much game over. Don't even have to log in, good malware can just hijack the browser session of the email, so opening it with a pre-existing session can be enough.

You've probably taken this precaution, but you know, just in case.

[Cathulhu]

Do not trade until your account is secured.

Take the following steps to secure your account:

1. Scan for malware. https://www.malwarebytes.com/
2. Check that the email and phone number on the Steam account are still yours.
3. Deauthorize all other devices. https://store.steampowered.com/twofactor/manage
4. Change passwords from a clean computer.
5. Generate new backup codes for your Mobile App. https://store.steampowered.com/twofactor/manage
6. Revoke the API key (there should be no key). https://steamcommunity.com/dev/apikey

Steam does not return inventory items or wallet funds: https://help.steampowered.com/faqs/view/3B6E-B322-2400-8D24

If you no longer have access to your account, read this:
https://steamcommunity.com/sharedfiles/filedetails/?id=1126288560