Something very strange with part of the steam system

[Chaos_enjoyer]

Something very strange with part of the steam system


I know how this may sound, but listen.

Nothing unusual
I got hacked using phishing or something, somehow got a mega super secret code from Steam Guard, and sold my inventory items.

Oddities
Based on the account login history, it is clear that I was the last one to log in and out of it, I did not put anything up for sale, letter about the sale of an item arrived in the mail 50 minutes after I logged out of my account.
A few hours later I saw a letter, I began the restoration procedures and logged into my account, looking at the login history it was clear that after me no one entered or exited my account, how could someone sell items without logging into the account?

Multiple users cannot be in the same account at the same time, so it turns out that these sales were carried out by the Steam system without my consent or knowledge?

By the way, just to clarify, after selling my items, someone simply put up some garbage for the required amount and bought it with money from my items,another funny thing is that one of these rubbish purchases was canceled, and they returned the money to me, or rather they put it on hold.
I wrote to support with questions about this,they simply sent a standard letter and closed the request

Has anyone had similar nonsense?

[J4MESOX4D]

This is a common occurrence when you allow your account to become compromised. Secure it and your device with the following steps:-

1. Scan for malware https://www.malwarebytes.com/
2. Check that the email and phone number on the Steam account are still yours.
3. Deauthorize all other devices https://store.steampowered.com/twofactor/manage
4. Change passwords from a trusted/clean device.
5. Generate new backup codes for your Mobile App https://store.steampowered.com/twofactor/manage
6. Revoke the API key https://steamcommunity.com/dev/apikey (there should be nothing in the APIKEY)

Support didn't close your tickets - the scammers are auto-closing them to prevent you from securing assistance, although any items or money lost this way are not returned.

[NS Plover]

They used your login - have you checked the devices that have logged into your account?

[pckirk]

You gave your steam credentials out. That is the only way someone can get into your steam account. Steam Account security is the responsibility of the account holder, not steam.

Your account was phished / hijacked. Follow steps 1-6 to secure your account:

1. Scan for malware https://www.malwarebytes.com/

2. Check that the email and phone number on the Steam account are still yours.

3. Deauthorize all other devices https://store.steampowered.com/twofactor/manage

4. Change passwords from a trusted/clean device.

5. Generate new backup codes for your Mobile App https://store.steampowered.com/twofactor/manage

6. Revoke the API key https://steamcommunity.com/dev/apikey (there should be nothing in the APIKEY)

Steam will NOT return lost funds or Items.

https://help.steampowered.com/en/wizard/HelpWithAccount

[Chaos_enjoyer]

引用自 J4MESOX4D：

This is a common occurrence when you allow your account to become compromised. Secure it and your device with the following steps:-

1. Scan for malware https://www.malwarebytes.com/
2. Check that the email and phone number on the Steam account are still yours.
3. Deauthorize all other devices https://store.steampowered.com/twofactor/manage
4. Change passwords from a trusted/clean device.
5. Generate new backup codes for your Mobile App https://store.steampowered.com/twofactor/manage
6. Revoke the API key https://steamcommunity.com/dev/apikey (there should be nothing in the APIKEY)

Support didn't close your tickets - the scammers are auto-closing them to prevent you from securing assistance, although any items or money lost this way are not returned.

Okay, maybe they closed the request to technical support, but how can you explain the lack of login and logout from my account in the login history?This cannot be erased or edited.

[Chaos_enjoyer]

引用自 pckirk：

You gave your steam credentials out. That is the only way someone can get into your steam account. Steam Account security is the responsibility of the account holder, not steam.

Your account was phished / hijacked. Follow steps 1-6 to secure your account:

1. Scan for malware https://www.malwarebytes.com/

2. Check that the email and phone number on the Steam account are still yours.

3. Deauthorize all other devices https://store.steampowered.com/twofactor/manage

4. Change passwords from a trusted/clean device.

5. Generate new backup codes for your Mobile App https://store.steampowered.com/twofactor/manage

6. Revoke the API key https://steamcommunity.com/dev/apikey (there should be nothing in the APIKEY)

Steam will NOT return lost funds or Items.

https://help.steampowered.com/en/wizard/HelpWithAccount

For God's sake, I'm
not asking for help with protecting my account, I screwed up somewhere a couple of years ago and I was hacked, pay attention to the words about the lack of information about logging in and logging out of your account, this cannot be covered up or edited, this is what lies in the steam system itself .

[J4MESOX4D]

引用自 Chaos_enjoyer：

引用自 J4MESOX4D：

This is a common occurrence when you allow your account to become compromised. Secure it and your device with the following steps:-

1. Scan for malware https://www.malwarebytes.com/
2. Check that the email and phone number on the Steam account are still yours.
3. Deauthorize all other devices https://store.steampowered.com/twofactor/manage
4. Change passwords from a trusted/clean device.
5. Generate new backup codes for your Mobile App https://store.steampowered.com/twofactor/manage
6. Revoke the API key https://steamcommunity.com/dev/apikey (there should be nothing in the APIKEY)

Support didn't close your tickets - the scammers are auto-closing them to prevent you from securing assistance, although any items or money lost this way are not returned.

Okay, maybe they closed the request to technical support, but how can you explain the lack of login and logout from my account in the login history?This cannot be erased or edited.

They likely cloned your session ID. Main thing you should be focused on how you allowed this to happen. Your mobile device could be compromised too.

[J4MESOX4D]

引用自 Chaos_enjoyer：

引用自 pckirk：

You gave your steam credentials out. That is the only way someone can get into your steam account. Steam Account security is the responsibility of the account holder, not steam.

Your account was phished / hijacked. Follow steps 1-6 to secure your account:

1. Scan for malware https://www.malwarebytes.com/

2. Check that the email and phone number on the Steam account are still yours.

3. Deauthorize all other devices https://store.steampowered.com/twofactor/manage

4. Change passwords from a trusted/clean device.

5. Generate new backup codes for your Mobile App https://store.steampowered.com/twofactor/manage

6. Revoke the API key https://steamcommunity.com/dev/apikey (there should be nothing in the APIKEY)

Steam will NOT return lost funds or Items.

https://help.steampowered.com/en/wizard/HelpWithAccount

For God's sake, I'm
not asking for help with protecting my account, I screwed up somewhere a couple of years ago and I was hacked, pay attention to the words about the lack of information about logging in and logging out of your account, this cannot be covered up or edited, this is what lies in the steam system itself .

If you were compromised two years ago and you didn't adequately secure your account, the scammers had access the entire time through a reserved session. They only struck when there was a payoff to be had. People can be hijacked for months/years.

[Chaos_enjoyer]

引用自 J4MESOX4D：

引用自 Chaos_enjoyer：

Okay, maybe they closed the request to technical support, but how can you explain the lack of login and logout from my account in the login history?This cannot be erased or edited.

They likely cloned your session ID. Main thing you should be focused on how you allowed this to happen. Your mobile device could be compromised too.

never hear about "cloned session ID" Apparently it's time to go to the forest, thanks for info

[Chaos_enjoyer]

引用自 NS Plover：

They used your login - have you checked the devices that have logged into your account?

There's no way to find out

[Chaos_enjoyer]

I think I got all the answers, but the question is whether it’s worth using steam guard at all. Authorization via mail looks much better.

[NS Plover]

引用自 Chaos_enjoyer：

引用自 NS Plover：

They used your login - have you checked the devices that have logged into your account?

There's no way to find out

If you look under your account settings you can see the devices - if you don't recognize one remove it.

[NS Plover]

引用自 Chaos_enjoyer：

I think I got all the answers, but the question is whether it’s worth using steam guard at all. Authorization via mail looks much better.

I think you should always use steam guard - it's not the same thing as the steam app and I think you need it for email notifications.

Whether to use the app really is about what you need. If you need quick market sales - you need it.

[Chaos_enjoyer]

引用自 NS Plover：

引用自 Chaos_enjoyer：

There's no way to find out

If you look under your account settings you can see the devices - if you don't recognize one remove it.

There are only my devices there, I guess someone noticed the traces behind them.
And so I changed the passwords, steam guard, logged out of all devices several times, checked the PC for viruses, protected the browser, is this enough or is it better to reinstall Windows through the BIOS?

[J4MESOX4D]

引用自 Chaos_enjoyer：

引用自 NS Plover：

If you look under your account settings you can see the devices - if you don't recognize one remove it.

There are only my devices there, I guess someone noticed the traces behind them.
And so I changed the passwords, steam guard, logged out of all devices several times, checked the PC for viruses, protected the browser, is this enough or is it better to reinstall Windows through the BIOS?

No need to reinstall windows as the above steps is enough to ensure your device is clean and your account is secure. You likely got compromised years ago when Steam Guard used codes only, and gave your credentials away to a phishing link. You were then shadow-hijacked without your knowledge and the scammers could just sit idle until there was a payoff to be had.

Steam Guard is much more secure now - mail is still viable as long as you don't infect your PC with targeting malware but mobile guard is also stronger because of the one-touch login confirmation.

[NS Plover]

引用自 Chaos_enjoyer：

引用自 NS Plover：

If you look under your account settings you can see the devices - if you don't recognize one remove it.

There are only my devices there, I guess someone noticed the traces behind them.
And so I changed the passwords, steam guard, logged out of all devices several times, checked the PC for viruses, protected the browser, is this enough or is it better to reinstall Windows through the BIOS?

I'm not an expert - some of the previous post have suggested a list of standard things.

If it were me - I'd follow the instructions to reclaim my steam account - and then I would copy all files I cared about onto a usb drive and reinstall windows. I would disable use of the app in case my phone had the problem. I would connect to email and change my password. I would give my device a different name and when logging into steam I would remove any device that wasn't that name.

But maybe I'm a bit extreme...