Seems someone hacked my inventory

[clueless]

i see that most of my inventory(trading cards etc) have been sold within the last 24 hrs..WITHOUT MY PERMISSION
is this a glitch or was i hacked?
anyone ever hear of something like this?

[Zarineth]

It's a pretty obvious sign of compromised account. Do all of the following:

1. Scan for malware https://www.malwarebytes.com/
2. Check that the email and phone number on the Steam account are still yours.
3. Deauthorize all other devices https://store.steampowered.com/twofactor/manage
4. Change passwords from a trusted/clean device.
5. Generate new backup codes for your Mobile App https://store.steampowered.com/twofactor/manage
6. Revoke the API key https://steamcommunity.com/dev/apikey (there should be nothing in the APIKEY)

Keep in mind, that valve does not restore any lost money/items.

[BJWyler]

Nope, you weren't hacked. You gave your log in information to a scam website or a scammer through one of the common, well known, and obvious scam attempts - like vote for my team or get a $50 gift card.

Follow the procedures listed above to recover your account. Your items are gone forever, however.

[clueless]

Well im pretty certain i never clicked on any links that would compromise my steam account
im pretty careful about things like that
anyway...email and phone numbers are mine
i changed my password

pity..hundreds of items in my steam inventory up in smoke

[nullable]

Publicado originalmente por clueless:

i see that most of my inventory(trading cards etc) have been sold within the last 24 hrs..WITHOUT MY PERMISSION
is this a glitch or was i hacked?
anyone ever hear of something like this?

Lots of users leak their credentials and their accounts get compromised. Yeah, we've heard of that a lot because Steam has a lot of users. And large swathes of users are careless, reckless, and hopelessly uninformed about account security.

It's not a glitch. And you weren't l33t h4x0r'ed. You might have been phished, or leaked your credentials somewhere along the line. A hijacker using those leaked credentials would really be "hacking", unless your definition is that any computer crime can be referred to as hacking, which most technical users won't agree to.

Publicado originalmente por clueless:

Well im pretty certain i never clicked on any links that would compromise my steam account
im pretty careful about things like that
anyway...email and phone numers are mine
i changed my password

pity..hundreds of items in my steam inventory up in smoke

Sure, but to be fair, if every user could accurately determine when they made a mistake or if they made a mistake, how would any accounts ever be compromised? Those users would always just be able to identify and avoid risks.

IE you're hardly the first user to not be sure how/where their account was compromised, especially when you only became ware of it in the aftermath.

[GrandePops]

https://www.reddit.com/r/SteamScams/comments/12ob7ce/someone_sold_my_steam_items/?utm_source=share&utm_medium=web2x&context=3

I think this could be an explanation.

Hello,

"You can correct. If the item is listed with a price tag of under $1, it will go to market without confirmation needed if it is within the reasonable median for the item and is relatively common. Rare items should still always need confirmation before being listed, regardless of the price."

[GrandePops]

Publicado originalmente por clueless:

Well im pretty certain i never clicked on any links that would compromise my steam account
im pretty careful about things like that
anyway...email and phone numbers are mine
i changed my password

pity..hundreds of items in my steam inventory up in smoke

https://youtu.be/G9QTgcJk2wM?feature=shared
This could also be another reason

Steam Guard could be an issue too

[BJWyler]

Click bait YouTube videos should be taken with a huge grain of salt, and what I mean by that is that they are not to be trusted in the slightest.

Steam Guard is not an issue. Accounts get hijacked through phishing or malware designed to capture Steam credentials specifically, including the Steam Guard code. That's it. Somewhere along the way, the OP handed over his credentials to a website or a scammer in disguise.

[Unn4m3d (♥AUT♥)]

Publicado originalmente por GrandePops:

Publicado originalmente por clueless:

Well im pretty certain i never clicked on any links that would compromise my steam account
im pretty careful about things like that
anyway...email and phone numbers are mine
i changed my password

pity..hundreds of items in my steam inventory up in smoke

This could also be another reason

Steam Guard could be an issue too

No, Steam Guard is not "an issue", that is a cheap clickbait video.

The only way someone gets through Steam Guard is by you giving out your account information along with the generated code.

[clueless]

Publicado originalmente por BJWyler:

Somewhere along the way, the OP handed over his credentials to a website or a scammer in disguise.

again i will say there are two chances i gave out my steam info unwittingly
Slim and None and Slim just left town

blaming the victim in this case me...does not solve the problem

i have used the internet for over 20 yrs and i nor my business have ever been hacked or phished
we use up to date real time software to prevent hijacks malware etc..etc..

i got my stuff stolen through a weakness in the Steam system..
period

im guessing its a matter of time before other Steam members start reporting this problem
if im the only one then its on me

but if more come forward its on Steam


Nuff Said

[Chompman]

The problem is unless you caused it on your end it won't happen with a proper 2fa system.

These types of posts happen all the time and it turns out people clicked a link at one time or were compromised on their end somewhere after people finally admit how it happened.

[Abigail From Sneaky Squid Dept.]

Publicado originalmente por clueless:

blaming the victim in this case me...does not solve the problem

People that can't accept responsibility for their actions will just end up in the same situation later.

[Neo]

Publicado originalmente por clueless:

Publicado originalmente por BJWyler:

Somewhere along the way, the OP handed over his credentials to a website or a scammer in disguise.

again i will say there are two chances i gave out my steam info unwittingly
Slim and None and Slim just left town

blaming the victim in this case me...does not solve the problem

i have used the internet for over 20 yrs and i nor my business have ever been hacked or phished
we use up to date real time software to prevent hijacks malware etc..etc..

i got my stuff stolen through a weakness in the Steam system..
period

im guessing its a matter of time before other Steam members start reporting this problem
if im the only one then its on me

but if more come forward its on Steam


Nuff Said

The only weakness in steam's security is the user. You did somehow do something, you may believe you did nothing, but somehow you did. Either getting your account details phised or by accidentally installing malware on your system. Or allowing a friend of family member to know your log in details.

[clueless]

that was my 4th post on this in several months
hardly what i would call "endlessly"

instead of defending steam "endlessly "how about steam fixing this problem?
you see 3 pgs of members who just hijacked
they all are at fault i guess
at the very least steam should close down this guys account

BTW...i am a site adm/moderator on a popular games related website and take every precaution not to be hacked or hijacked..and i advise members there how to avoid it

the problem is steam

[C²C^Guyver |NZB|]

Publicado originalmente por clueless:

that was my 4th post on this in several months
hardly what i would call "endlessly"

instead of defending steam "endlessly "how about steam fixing this problem?
you see 3 pgs of members who just hijacked
they all are at fault i guess
at the very least steam should close down this guys account

BTW...i am a site adm/moderator on a popular games related website and take every precaution not to be hacked or hijacked..and i advise members there how to avoid it

the problem is steam

You don't know what happens to accounts that hijack other people's accounts? Those accounts are restricted. It is very serious.


If you're an admin or moderator your account probably would not have been hijacked. You either gave the information to someone or you clicked a link.

Advise members how to avoid it? There are entire articles dedicated on how to keep your account from being hijacked.

https://help.steampowered.com/en/faqs/view/6639-EB3C-EC79-FF60


Have you read any of that?

The problem is that you gave away the account login information.

[clueless]

Post number 6(since i see were are counting)

i read all of it
took every precaution
clicked on no links to anywhere i dont know well
was still hijacked ..as recent as today

the site i am an adm for was established in 2007 with close to 5k members
in those 17+ years i recall offhand about 5 instances where members accounts were hijacked during the first 2-3 yrs of the site
the problem was immediately diagnosed and fixed
on steam hijacking is a daily occurrence

to be honest..i could care less about steam points or my inventory which was stolen when i first posted about this
i come here to play games and i enjoy unlocking achievements
but it does leave a bad taste in ones mouth when this happens
(as you can see from the reactions of the other steam members who got hijacked by this guy)