20 items in my tf2 invtory just sold for less then 10 cents.

[Zjd Nekro]

And I didn't list any of the items.

I just got an email about an hour ago from steam saying they all sold for suspicious prices and are being held for that reason.I have contacted support about it.

confusing things is that i have 2fa and steam guard and i haven't had steam linked to anything third party in years.

An old gift copy of divinity OS was given to some rando but I don't care too much about that.

is there anything i can do that i haven't already to fix this?

[MT. AKINA]

Have you used any sites so far that might be compromised? run Malwarebytes too make sure its not your computer thats compromised if they are being held you should be able to contact support assuming they're still being held if not im pretty sure they cant give you items back. I hope you get it sorted

[nullable]

Your account is compromised. It's not confusing, steam guard and 2fa are locks, locks were great when used correctly. Users often misuse and mishandle account security. Users often make statements where they seem to believe having Steam Guard provides them an invincible shield and all other security is redundant or can be compromised. And that's not true.

Secure your account, handle security better, try to learn why just having 2FA doesn't make you secure and that it's just part of the larger security model, the one users can carelessly sabotage, and often do, at any moment.

[Zjd Nekro]

Already ran malwarebytes, it found lot of trojans and some false positives. I haven't been on any site that use the api outside of isthereanydeal.com in a few years.

[Aluvard]

Follow steps 1-6 to secure your account:

1. Scan for malware https://www.malwarebytes.com/
2. Check that the email and phone number on the Steam account are still yours.
3. Deauthorize all other devices https://store.steampowered.com/twofactor/manage
4. Change passwords from a trusted/clean device.
5. Generate new backup codes for your Mobile App https://store.steampowered.com/twofactor/manage
6. Revoke the API key https://steamcommunity.com/dev/apikey (should be nothing in the APIKEY)

[MT. AKINA]

Originally posted by Zjd Nekro:

Already ran malwarebytes, it found lot of trojans and some false positives. I haven't been on any site that use the api outside of isthereanydeal.com in a few years.

this could totally be the issue if you search up tronscript on google it should take you to a reddit post follow the instructions and run it all if you have time just to make sure your really safe this time around, they might have remote accessed your PC at some point if there was no warning of logins from different countries :)

[Zjd Nekro]

Originally posted by Aluvard:

Follow steps 1-6 to secure your account:

1. Scan for malware https://www.malwarebytes.com/
2. Check that the email and phone number on the Steam account are still yours.
3. Deauthorize all other devices https://store.steampowered.com/twofactor/manage
4. Change passwords from a trusted/clean device.
5. Generate new backup codes for your Mobile App https://store.steampowered.com/twofactor/manage
6. Revoke the API key https://steamcommunity.com/dev/apikey (should be nothing in the APIKEY)

First things i did.

Originally posted by MT. AKINA:

Originally posted by Zjd Nekro:

Already ran malwarebytes, it found lot of trojans and some false positives. I haven't been on any site that use the api outside of isthereanydeal.com in a few years.

this could totally be the issue if you search up tronscript on google it should take you to a reddit post follow the instructions and run it all if you have time just to make sure your really safe this time around, they might have remote accessed your PC at some point if there was no warning of logins from different countries :)

possible, looking it up now.

[Aluvard]

Change password on contact email too.

[Zjd Nekro]

Originally posted by Aluvard:

Change password on contact email too.

I did, apparently I haven't changed it since 2014.

[PolarisTek]

:))

[Zjd Nekro]

I'm going to update for anyone else who might find this thread through Google.

My best guess is it was a rogue API key, if it happens to you, your inventory is gone. Support has never to my knowledge returned stolen items and they didn't for me. Report the accounts that bought your stuff because that really all you can do.

I haven't bought or really played a Valve game in about a decade, That's not going to change.

Still sucks though, I had some first gen vintage and genuine items.