steam breach

[Toyota GR Supra]

Yesterday I was scammed, someone got into my account and started selling all my items for less than 1 dollar (regardless of the value) to bypass the Steam Guard confirmation. That way he could convert everything into balance. He sold over 60 items without being stopped by any type of security or Steam method. The flawed system allowed him to make VERY suspicious transactions without being stopped by anyone (who supposedly should have been working). After selling everything he could, he used the balance to buy an item on the market valued at 1 cent for all the value that was in my account. In short, he sold everything from my account and transferred it to his own account without any difficulty. When I contacted support, guess what? They said they couldn't do anything! In other words, if you are robbed within the platform NOTHING can be done. Imagine, you have money in a virtual bank and it suffers a hack attack... and they send you a message 'we can't do anything, change your password and renew your token' WHAT A JOKE

[pckirk]

Only You are responsible for the security of your account information. The only way someone can log in as you, is if you gave them this info... There is no other way.

Accounts are phished not hacked.

You gave away all your account details.

The account name, the password and the KEY to the door, the Steam Guard Mobile code giving them access to the account.

How? by either logging into a known scam site or item sell sites, fake steam log-in websites, or by tailored malware on your PC, the vote for my team scam, you have a pending ban scam on Discord, free knife click the link etc.

How does Steam (a program) know it is not you when all the account details are correct? It doesn't, therefore any action taken on your account is seen as you doing said actions.

The alternative is not plausible:

1) Someone would have to "GUESS" your account name from "millions of possible combinations".

2) Next they would have to "GUESS" your password from "millions of possible combinations" and then match it to your account name with "millions of possible combinations".

3) And finally they would have to "GUESS" the Steam Guard Mobile code "which changes every 30 seconds" to match both your account name and password to then have access your account.

Your account was phished / hijacked. Follow steps 1-6 to secure your account:

1. Scan for malware https://www.malwarebytes.com/

2. Check that the email and phone number on the Steam account are still yours.

3. Deauthorize all other devices https://store.steampowered.com/twofactor/manage

4. Change passwords from a trusted/clean device.

5. Generate new backup codes for your Mobile App https://store.steampowered.com/twofactor/manage

6. Revoke the API key https://steamcommunity.com/dev/apikey (there should be nothing in the APIKEY)

Steam will NOT return lost funds or Items.

https://help.steampowered.com/en/wizard/HelpWithAccount

[BJWyler]

Account security is 100% your responsibility. Someone got on to your account and stole your inventory because you, and you aline, gave them access to the account.

You did it by falling for a well known and obvious scam, or by visiting a third party gambling/trading/skin site, all of which are scam sites.

Support will no longer help those who hand the keys to their front door to scammers, nor should they. Account security is simple and basic.

[Stormer]

Steam is not a bank do not treat it as one

[Toyota GR Supra]

It was an example of everything I said. If you think it's right how they are managing valuable things that everyone has... go that way.

[Animus]

Escrito originalmente por 𝒌𝒂𝒎𝒊𝒏𝒂:

It was an example of everything I said. If you think it's right how they are managing valuable things that everyone has... go that way.

Zero monetary value, once funds are in a wallet, they no longer hold a dollar value outside of Steam's closed system.

That's partly why you can't cash skins or wallet funds out for real $ through Steam.

[Vamp]

1. give out Steam password online
2. Wonder how people got into your account
3. Hmm, the BREACH must have been due to their FLAWED system.. yes that must be it.

[76561198407601200]

Escrito originalmente por 𝒌𝒂𝒎𝒊𝒏𝒂:

It was an example of everything I said. If you think it's right how they are managing valuable things that everyone has... go that way.

Yet ignoring the way the user manages their account security. Accounts aren't hacked nor steam breached, the user in some way allowed their account to become compromised. Using an infected (personal or public) pc, logging into 3rd party sites with your credentials, providing those creds to someone in discord, etc.