安裝 Steam
登入
|
語言
簡體中文
日本語（日文）
한국어（韓文）
ไทย（泰文）
Български（保加利亞文）
Čeština（捷克文）
Dansk（丹麥文）
Deutsch（德文）
English（英文）
Español - España（西班牙文 - 西班牙）
Español - Latinoamérica（西班牙文 - 拉丁美洲）
Ελληνικά（希臘文）
Français（法文）
Italiano（義大利文）
Bahasa Indonesia（印尼語）
Magyar（匈牙利文）
Nederlands（荷蘭文）
Norsk（挪威文）
Polski（波蘭文）
Português（葡萄牙文 - 葡萄牙）
Português - Brasil（葡萄牙文 - 巴西）
Română（羅馬尼亞文）
Русский（俄文）
Suomi（芬蘭文）
Svenska（瑞典文）
Türkçe（土耳其文）
tiếng Việt（越南文）
Українська（烏克蘭文）
回報翻譯問題
討論區規矩與守則
檢舉此篇文章
How accounts are hijacked.
A) Logging into scam sites aka phishing.
There scammers that setup fake pages to look legit as possible, either the two methods such as fake url address which you can tell by actually comparing, and the JavaScript fake page on a website that shows real Steam url, but the window is tunnel via scammer server.
B) Sharing login information with others, or using same login information for everything.
There scammers will use same details you used that was leaked, or given by you, to try access emails, and other stuff to try get anything from you, the major problem is that if they get access to email they try do recovery process that one way of the issue can happen. Another is scammers will try to impersonate as whatever to try trick you into giving them anything they ask from you such as login details, money, or etc...
Sharing with others is another major issue, if you share with someone they could login to phishing site, or share it with someone without you knowing.
C) Virus is a big deal, if you download, and run/install sketchy things, even things from people you don't expect to get something to download randomly, or piracy, which scammer can keylog, record data, and more.
D) Logging on public devices, or devices not of your own.
As you never know if scammer affected the device, hence C) talked about.
Always were, always will. Just like in real life there's multiple ways to con people and conmen keep rotating them over time.
The amount of account theft here is basically minimal (Even if you see here several threads on the subject there's tens of millions of people logging in daily without getting their accounts compormised) A pale shadow of what it was at its worst moment in regards account theft.
Like I said before; This happened over a decade ago, and NO links were involved. Once I realized what happened, they (the hacker/s) who I recently just added as a "friend" openly admitted to doing it, and bragged about it!
After removing them from my friends list, and changing everything, I wanted to find out how they did it... Eventually I found a YT video showing how easily it could be done just by being added as a "Friend".
No idea if this loophole still exists today; which is why I won't post the video, or explain how it was done!
If as you claim Steam accounts are hacked please explain hown in 19+ years i have never lost access to my Steam account, and that includes before Steam Guard Email and Steam Guard Mobile existed.
The reality is accounts are PHISHED not hacked because the end user gave away all their account details. The account name, the password and the KEY to the door, the Steam Guard Mobile code giving them access to the account.
How? by either logging into a known scam site or sites, tailored malware on your PC, the vote for my team scam, you have a pending ban scam on Discord, free knife click the link etc.
How does Steam (a program) know it is not you when all the account details are correct? It doesn't, therefore any action taken on your account is seen as you doing said actions.
The alternative is not plausible:
1) Someone would have to "GUESS" your account name from "millions of possible combinations".
2) Next they would have to "GUESS" your password from "millions of possible combinations" and then match it to your account name with "millions of possible combinations".
3) And finally they would have to "GUESS" the Steam Guard Mobile code "which changes every 30 seconds" to match both your account name and password to then have access your account.
Note:
1) Only you and Steam Support know your account name until you give it away.
2) Steam passwords are hashed, not stored therefore only you can give it away.
3) They physically need to have your mobile for the code, or you need to enter the code.
Your thread topic is about Steam Accounts.
For all the years I been on here before the restrictions on friend invites, and after added changes, all the scammers do is invite, then send you a link to a phishing site, or impersonate to trick you.
Most popular is trade/gambling sites where you think they're legit, but end up logging via phishing site.
Sometimes when scammer see someone have mobile 2FA added on the account after getting access, they would try to trick the victim into trading items to a "friend" from their list, which there already API key on the victim account setup by the scammer, so when victim trade it redirects victim to scammer alt account that copy the "friend" display name, and picture. Another scare tactic in this is them doing impersonate where they change your display name, and info on your profile saying your ban, and try scare you to trade items, and send them money.
Again none of this is how you claim by just adding a friend, as only way someone can take your account is if you gave them access to your account.
Read post #8 and #20.
I read them.
Your thread topic is about Steam accounts being hacked while you attempted to shift the goalposts with Apex Legends which was an RCE exploit. Zero to do with Steam.
Steam accounts are PHISHED because just like you they gave away all their account details.
Secondly i ask again as you skipped post #34.
If as you claim Steam accounts are hacked please explain how in 19+ years i have never lost access to my Steam account, and that includes before Steam Guard Email and Steam Guard Mobile existed.
Post #34 quoted below:
How close am i to GUESSING your account details?
Account name: FluffyBunny? BlackSun?
Password: Chuckleberry? Ddd6758?
Steam Guard Mobile Code? Oh! Wait it changes every 30 seconds.
There problem with Apex game itself as the game had vulnerability due to RCE, but this had nothing to do with Steam side this was EA problem when you play apex you read exactly what I said, when you play apex. Hence has nothing to do with adding friends on Steam as you're claiming.
The RCE take control, injects, or collect things from victim device, hence not a steam side issue, user side issue that victim of RCE when played apex.
steam send on wish list mail outs and game purchases...
why cant the send out spam awarenss emails each year with stats...
how many steam users needed account recovery.... and how can i avoid it..
Sometimes the best way to learn for some people is when it happens to them, otherwise not much can be done. Phishing always gonna be a factor, same with virus's, and people being to gullible falling for scams.
If only PSA actually worked scammers be out of the business lol.
If you read post #8 & #20 as you claim you did, and still don't understand, then I can't help you.
As for everything else you typed... Big corporations like Sony with "top security" features have been hacked multiple times since the PS3 days. Gaining access to PSN accounts among other things!
So what makes you think steam is more securer than them or Capital One?
not much... is a bit different to nothing...
too many PSA sure... but i dont think i have ever gotten anything from steam
to warn me about the known scams that are going on...
are steam doing anything...
As I said before, my incident with the "friend hack" happened over a decade ago. Long before Apex even existed. 2 different things, but both involve steam accounts being hacked.