Steam Guard Account hijacked by Russian location

[Mehv]

On election day no less (11-5-24) My account was fraudulently accessed from a Russian location and my -Steam Guard was by passed. I am 40 years old, been building my own pc's since I was 21 and I DO know computers
My husband is IT, I do Graphic Design and some web work, and I have my own history of being phished 20 years ago and learned from my mistakes most painfully.

I have no friends to accidentally click any emails or texts. (I am Antisocial AF)
And I have had SteamGuard and Only used my Steamguard App on both PC and Phone. I also use blockers to protect from pop ups and I do NOT click on emails. EVER. I ignore them always. And I have no friends to accidentally click on links from. I am antisocial as hell.

I do think its related to the hack to Steam that happened in March. (see Post below for link)

https://www.reddit.com/r/steamsupport/comments/1bfts36/my_account_has_been_hijacked/

Steam will not refund the 62$ the Hijacked Russian account stole from me. :(

I currently play Many online games and have many launchers. But none of these have been hacked/Hijacked/compromised or done anything fraudulent.

Elder scrolls online
Black desert online
Final Fantasy XIV Online
Guild wars 2
Epic games
EA launchers
GOG Launcher

Steam Guard could still be compromised from March Hack still

My 2 cents DO NOT KEEP MONEY IN STEAM WALLET AT THIS TIME.

**Edit
Steam allow an option to turn off the market store in Steam accounts.

[Wayward]

There was no „hack“ to Steam in March and random reddit posts are not proof of such either. There are people losing access to their accounts everyday because they've been phished or otherwise gave their credentials away; and it is often by people who claim they are too smart and too knowledgeable about computers to ever have that happen to them.

If there really was a breach on the biggest PC platform for purchasing games then there would be tons of news coverage on it, not just random reddit posts. At the very least, tech-related news sites would have all covered it, as well as gaming news sites. But they haven't. You would also see it on breach-related sites like haveibeenpwned but there is no mention of a Steam breach there either.

[Chika Ogiue]

It's amazing the number of people who claim to be in or closely related to someone in "IT" who get phished. It's almost like their line of work has no correlation to how easy they fall for social engineering.

[D. Flame]

Steam allows compromised games onto the store. They can then steal your session cookies, and essentially log into anything you are currently logged into without needing to verify again.

This has been a known vulnerability for awhile. Valve just refuses to do anything about it. They refuse to refund funds lost to this. And they refuse to enable 2FA for community purchases.

Fanboys will tell you that you got yourself compromised, but there are actual game devs that have had their accounts compromised with this same exploit.

[Wayward]

Originally posted by Mehv:

https://www.bitdefender.com/en-us/blog/hotforsecurity/77000-steam-accounts-are-hacked-and-raided-every-month/

Did you actually read the article you posted?

Directly from the article:

«Steam accounts are hijacked when a hacker manages to break into an account without the owner’s permission. Often this is done by stealing passwords with keylogging malware, or through phishing for login credentials on fake sites.»

[Mehv]

Valve should allow accounts to turn off market store.
It's literally a m0n3y L@und3ring

[Mehv]

Originally posted by Wayward:

Originally posted by Mehv:

https://www.bitdefender.com/en-us/blog/hotforsecurity/77000-steam-accounts-are-hacked-and-raided-every-month/

Did you actually read the article you posted?

Directly from the article:

«Steam accounts are hijacked when a hacker manages to break into an account without the owner’s permission. Often this is done by stealing passwords with keylogging malware, or through phishing for login credentials on fake sites.»

My frustration is that steam guard is ON and it provided No promised protection. I have had it on for over 7 years.

That means anyone can be compromised if steam guard fails.
Why is other Authentication 100% but Steam Guard is Trash

[FFL2and3rocks]

Originally posted by Mehv:

My frustration is that steam guard is ON and it provided No promised protection. I have had it on for over 7 years.

That means anyone can be compromised if steam guard fails.
Why is other Authentication 100% but Steam Guard is Trash

Security is only as safe as the person using it. Stop hiding your keys under the mat.

[Thiesen]

You claim to know computers but have no idea what "phishing" is...

https://en.wikipedia.org/wiki/Phishing

Let me clarify that for you...

YOU HAVE BEEN LOGING IN TO A WEBSITE THAT CLAIMED TO BE A ORDINARY TRADING SITE BUT IN FACT WHERE A SCAM SITE... they stole YOUR login credentials for your Steam account... ie you literally gave the key to your house away... maybe even removed the windows... or simply just dangled your jewelry Infront of a drug addict...

[Nanami]

If you need help with Account Security or Recovery, please contact Steam Support.