YOUR ACCOUNT MIGHT BE GETTING USED TO HIJACK ACCOUNTS

[404_Not_Found]

if you've gotten DMs from a steam friend saying "my friend created logo for my buddies university esports team, vote for it i'll give you a link" make sure that person that DMed you RESETS THEIR PASSWORD

it looks like alot of people including me fell for this.
People's accounts are getting used to hijack more peoples accounts.



if this already sounds familiar and think it happened to you CHECK YOUR FRIENDS LIST AND STEAM CHAT.

if some are blocked that YOU yourself did not BLOCK check your messages and make sure your account wasn't used to message and hijack them.

RESET YOUR PASSWORD IF THIS HAPPENED OR HAS HAPPENED TO YOU.

[Pscht]

Ok, mandatory question: A lot of users AND YOU didn't read the previous thousands of posts just like this one. WHY would they suddenly read your thread?

[Neo]

All you're doing is telling people here what they already know. The actual people who fall victim to this don't even bother reading these forums.

[Chika Ogiue]

Escrito originalmente por Pscht:

Ok, mandatory question: A lot of users AND YOU didn't read the previous thousands of posts just like this one. WHY would they suddenly read your thread?

Because HE used ALL CAPS in HIS title and none of those other littler people ever did!!

[404_Not_Found]

Escrito originalmente por Neo:

All you're doing is telling people here what they already know. The actual people who fall victim to this don't even bother reading these forums.

even if it is obvious when your outside looking in people might not have put the pieces together to know they've been hijacked. i know it took me around a week or 2 to notice anything.

im literally just trying to help people not fall for it like i did.

[Unn4m3d (♥AUT♥)]

Escrito originalmente por LollyPopster:

Escrito originalmente por Neo:

All you're doing is telling people here what they already know. The actual people who fall victim to this don't even bother reading these forums.

even if it is obvious when your outside looking in people might not have put the pieces together to know they've been hijacked. i know it took me around a week or 2 to notice anything.

im literally just trying to help people not fall for it like i did.

And did you read any of the thousands of already existing Threads about this?

[_veleron]

Escrito originalmente por Unn4m3d (♥AUT♥):

And did you read any of the thousands of already existing Threads about this?

Even if not, it doesn't mean no one did.

[Pscht]

Cool, still no need for yet another.

[Lilim]

Escrito originalmente por LollyPopster:

if you've gotten DMs from a steam friend saying "my friend created logo for my buddies university esports team, vote for it i'll give you a link"

We already have an official support page about this scam.

Scam: Vote for My Team

Escrito originalmente por LollyPopster:

RESET YOUR PASSWORD IF THIS HAPPENED OR HAS HAPPENED TO YOU.

You should change your password instead of resetting it.

Take the following steps to secure your account:

1. Scan for malware. https://www.malwarebytes.com/
2. Check that the email and phone number on the Steam account are still yours.
3. Deauthorize all other devices. https://store.steampowered.com/twofactor/manage
4. Change passwords from a clean computer.
5. Generate new backup codes for your Mobile App. https://store.steampowered.com/twofactor/manage
6. Revoke the API key (there should be no key). https://steamcommunity.com/dev/apikey

[ShelLuser]

Escrito originalmente por LollyPopster:

if you've gotten DMs from a steam friend saying "my friend created logo for my buddies university esports team, vote for it i'll give you a link" make sure that person that DMed you RESETS THEIR PASSWORD

Actually, that won't help them at all. The only way for that situation to happen is when an account got taken over, and resetting your password will not fix that because the hijackers don't use the password in the first place but a so called API key.

The moment someone is foolish enough to log onto a fake website then several things are going to happen... first a bot logs back onto the account and places an API key. This is what allows those hijackers to control someones account.

So.... the password is the least of your worries.

First and foremost you need to remove the API key, then use the Steam settings to deauthorize all other devices. Then you should consider changing your password to be on the safe side, but as said: it's just for extra security but technically not required since passwords cannot be reverse engineered due to the way these get stored (in technical terms it's not so much the password but a so called hash that's being used to verify things: a value which represents the actual password).

And yah... I think you mean well but to be honest... you see threads like these on almost a daily basis.

[Unn4m3d (♥AUT♥)]

Escrito originalmente por _veleron:

Escrito originalmente por Unn4m3d (♥AUT♥):

And did you read any of the thousands of already existing Threads about this?

Even if not, it doesn't mean no one did.

It means there's no point of spamming the forums with these Threads.
People only look this up once it's too late.