Recent Ongoing Wallet/SteamMarket scams/hacks ! CAREFUL EVERONE !

[elpaVedo]

Hi !

Maybe some of you had of heard about similiar problem as i had.

One day on april 08 i decided to check my steam email box, and find out several tickets from sold and purchesed items i NAVER authorised, just day before on april 07.
About 820+ random items were sold in ONE day from my steam inventory (cards, profile themes, emoticons ect...) even 7 pages of stickers and capsules for cs2. basically 1/3 of my full inventory that cost around 0,03 cent to 0,30 cent were sold in one day on the steam market.
Without even ONE notification from steamguard WTH valve?

To make things better, someone had purchesed Dota 2 skins using 20euros i had available on my steam wallet. Skins that arent even in my iventory, they were bought as gifts i guess. On the other hand i have 2 pages of new worthless Dota 2 items that are still blocked for trading.

Just to clarify i have never played or owned anything from Dota 2.

Nobody was granted access to my account or even my pc, so i can't be that. And steamguard failed to block all those purchases. I had to find ♥♥♥♥ out by coincidence.

Respons from steam support said basically that life is brutal and they cant cancel this SCAM.
I guess refunding 800+ items from several houndred accounts is a lot of work.

♥♥♥♥ happens

I advise everyone to secure your accounts by using family mode.
Clearly you cannot depend only on steamguard, Valve fix !

Keep warm good folks!

[nullable]

You not being aware of how you compromised your account may not mean that all or any of the problems are on Valve's side of security.

Also seems like you're not aware of all the policies on the platform you're using. Valve hasn't restored items in many many years. They provide sufficient tools to secure your account. But users are bad at security and usually not aware of it. But the weakest part of security is the user, and that applies to everyone.

If we trusted user stories that they would never make a mistake, cannot be tricked, never did anything that could possible compromise their account, then one wonders how accounts could ever be hijacked or scammed at all? Some users are making two mistakes: Compromising their own accounts. And being convinced they didn't.

Three mistakes if you count that their beliefs enable them not to put any work into making changes to their questionable security habits.

[Wolf Knight]

steam used to do restorations of stolen items. people abused it and didnt take the security of their account serious nor care that they were doing unsupported trades. so they stopped.

you need to sort out how you gave someone the log in information

make sure your account is secured or they will take more stuff from you

Steps to take NOW to secure the account:
1. Scan for malware https://www.malwarebytes.com/
2. Deauthorize all other devices https://store.steampowered.com/twofactor/manage
3. Change passwords from a clean computer
4. Generate new backup codes for your Mobile App https://store.steampowered.com/twofactor/manage
5. Revoke the API key https://steamcommunity.com/dev/apikey (there should be nothing in the APIKEY)

[Chika Ogiue]

paVed の投稿を引用：

I advise everyone to secure your accounts by using family mode.

If Steam guard didn't stop you from giving your login information away (which is what happened, I'm afraid), no "family" settings are going to help you either.

Do the steps in post 2. In future don't log into any site claiming anything related to Steam that isn't a Valve owned domain.

[GEB.Rosé]

actually, same happened to me just an hour ago! thankfully, i only lost like 2.5$ worth of items. no idea where did i got got either, since the last time i logged anywhere in was like, idk, months ago.

[nununizen]

this happened to me some days ago, the hacked refunded 3 games and bought around 20 items from the community market. I talked to steam and even though the KNOW I was hacked, KNOW I had all the security options + guard ON and even showed the PROOF of date, time and price I bought the games (they asked for proof), they say they cannot give the games OR THE MONEY back as it would cause confusion between me and the hacker 🥺🥺🥺🥺

ffs I just want the games back as I bought them with sale prices or refund of FULL PRICE so I can buy them back without having the wait MONTHS to buy them again without exorbitant prices

[Chika Ogiue]

GEB.Rosé の投稿を引用：

actually, same happened to me just an hour ago! thankfully, i only lost like 2.5$ worth of items. no idea where did i got got either, since the last time i logged anywhere in was like, idk, months ago.

Yes, this is the general pattern for any scam that has you "vote" for something, for example. They get your log in information and sit on it for a while.

As for where... Well, if you use the same email address (and, worse, same password) for things, there's the potential for that information to have been gained via a breach. Check your email address here: https://haveibeenpwned.com/

[GEB.Rosé]

Chika Ogiue の投稿を引用：

Yes, this is the general pattern for any scam that has you "vote" for something, for example. They get your log in information and sit on it for a while.

As for where... Well, if you use the same email address (and, worse, same password) for things, there's the potential for that information to have been gained via a breach. Check your email address here: https://haveibeenpwned.com/

i've been checking my email on that website like bi-monthly, everythings good! although i still changed my password XD.

also, whats up with that "vote" thingy you've mentioned?

[nullable]

GEB.Rosé の投稿を引用：

also, whats up with that "vote" thingy you've mentioned?

Basically formula is a friend on your friends list asks you to vote for their team on X site. Trick is friends account has been hijacked and X is probably a phishing site.

Most users nominally trust their friends, and don't expect their friends account to be hijacked, so they do as requested.

Normal user fallibility takes over and a significant percentage of users get phished and end up with compromised or hijacked accounts.

[GEB.Rosé]

nullable の投稿を引用：

GEB.Rosé の投稿を引用：

also, whats up with that "vote" thingy you've mentioned?

Basically formula is a friend on your friends list asks you to vote for their team on X site. Trick is friends account has been hijacked and X is probably a phishing site.

Most users nominally trust their friends, and don't expect their friends account to be hijacked, so they do as requested.

Normal user fallibility takes over and a significant percentage of users get phished and end up with compromised or hijacked accounts.

oh, so, some basic phishing stuff. got it. tho, i didnt get any messages on steam, let alone links, in like a year maybe. anyway, thanks for the info, i'll be (even more) aware of it now.

also, after using malwarebytes and resetting my passwords, what else can i do to make sure that my pc is clean and safe to use? or where could i find further info on that?

[Chika Ogiue]

GEB.Rosé の投稿を引用：

also, whats up with that "vote" thingy you've mentioned?

You can read more about that here: https://help.steampowered.com/en/faqs/view/7958-1D76-CA26-7BB4

You can see the other scams Valve have articles for here: https://help.steampowered.com/en/?text=scam

But basically, it's just an excuse to redirect you to a fake site that will return an error (or simply appear to do nothing) when you log in. In reality, it's saved your login details for the scammer to make use of later.