"Bro this is a gits for you" Scam being sent from account.

[Gasi]

"this is for you","Bro this is a gits for you","You received gift from friend:" all ending with fake steamcommunity.com urls to scam people are being set from my account to all my steam friends.

now for the scary part. I already changed my password, my steam 2fa backup codes. deauthorized every computer that has ever been logged into my account, checked for an api key, ran multiple antivirus tests, yet this still is happening.
I dont understand how someone can have access to my account eventhough I did all those things.

what are my options ?

and how come the person doing this doesnt have to enter my 2fa code and doesnt appear in my list of authorized devices ?

[HikariLight]

If it's a gift that was sent to you, then the only requirement is to be on your friends list for 3 days.

[Aluvard]

Your mail might be compromised, so repeat all steps starting from changing your email password.

[Gasi]

Originally posted by Aluvard:

Your mail might be compromised, so repeat all steps starting from changing your email password.

already done

[Tiago1382]

This happened to me too. Just after downloading a program from a third party. So my suspects are that this is not someone doing it, but a bot on your own computer. Do you remember if you have downloaded anything during that period?