All Discussions > Steam Forums > Steam Discussions > Topic Details

This topic has been locked

Tjack Morris Apr 13 @ 9:13pm

Steam + Discord + Facebook hacked.

My steam discord and facebook got hacked somehow.
Even steam with 2-Factor authentification got hacked???
When i login to everything its fine.
And all with diffrent passwords.
Only thing hacker did was try to send a link to all my friends on these platforms....
"Steam activation code" however when clicking the link its only white.
Has anyone heard of this or experienced the same thing?
How is it possible when even i have 2 factor authentification???

Something went wrong while displaying this content. Refresh

Error Reference: Community_9745725_

Loading CSS chunk 7561 failed.
(error: https://community.fastly.steamstatic.com/public/css/applications/community/communityawardsapp.css?contenthash=789dd1fbdb6c6b5c773d)

The author of this topic has marked a post as the answer to their question.
Click here to jump to that post.

Originally posted by pckirk:

Originally posted by Tjack Morris:
Originally posted by Wolfpig:
If more then one service got phished..... I would check that the one has not access to your mail account (aka immediately change passwords on that) as that would be the most logical cause that it happend on 3 different places (apart from using the same login at every place.... )
I still dont understand, even with a hacked mail account that they can bypass 2-factor authentification of steam app guard?

Because you were phished on your computer. They grabbed the session token from that 30 second 2fa, along with your login info. that is the only way. with all 3 parts of the key, they could use that at any time to log in as you, since they had the 2fa session token code, steam thinks it is you.

The only way to get all 3 parts of the key is from your computer, you were phished.

< 1 2 >

Showing 1-15 of 30 comments

Slender Apr 13 @ 9:27pm

"somehow" lol, contact steam support

Tjack Morris Apr 13 @ 9:45pm

I like to live my life dangerous

Wolfpig Apr 13 @ 9:46pm

If more then one service got phished..... I would check that the one has not access to your mail account (aka immediately change passwords on that) as that would be the most logical cause that it happend on 3 different places (apart from using the same login at every place.... )

pckirk Apr 13 @ 10:04pm

Originally posted by Tjack Morris:
My steam discord and facebook got hacked somehow.
Even steam with 2-Factor authentification got hacked???
When i login to everything its fine.
And all with diffrent passwords.
Only thing hacker did was try to send a link to all my friends on these platforms....
"Steam activation code" however when clicking the link its only white.
Has anyone heard of this or experienced the same thing?
How is it possible when even i have 2 factor authentification???

You gave away your log in credentials, the steam login username that only You know, the steam login password, that only you should know.. And the 2fa session token for that assigned 30 second useable code. You got phished.

Your account was phished / hijacked. Follow steps 1- 7 to secure your account:

1. Scan for malware https://www.malwarebytes.com/

2. Check that the email and phone number on the Steam account are still yours.

3. Deauthorize all other devices https://store.steampowered.com/twofactor/manage

4. Change passwords from a trusted/clean device.

5. Generate new backup codes for your Mobile App https://store.steampowered.com/twofactor/manage

6. Revoke the API key https://steamcommunity.com/dev/apikey (there should be nothing in the APIKEY)

7. Make sure your steam recovery email account is secure

Steam will NOT return lost funds or Items.

Tjack Morris Apr 13 @ 10:19pm

Originally posted by Wolfpig:
If more then one service got phished..... I would check that the one has not access to your mail account (aka immediately change passwords on that) as that would be the most logical cause that it happend on 3 different places (apart from using the same login at every place.... )

I still dont understand, even with a hacked mail account that they can bypass 2-factor authentification of steam app guard?

a random horse Apr 13 @ 10:20pm

Originally posted by Tjack Morris:
Originally posted by Wolfpig:
If more then one service got phished..... I would check that the one has not access to your mail account (aka immediately change passwords on that) as that would be the most logical cause that it happend on 3 different places (apart from using the same login at every place.... )
I still dont understand, even with a hacked mail account that they can bypass 2-factor authentification of steam app guard?

If you want help, try not calling people fa****s, eh?

Qbert ⭐ Apr 13 @ 10:36pm

Originally posted by Tjack Morris:
Originally posted by Wolfpig:
If more then one service got phished..... I would check that the one has not access to your mail account (aka immediately change passwords on that) as that would be the most logical cause that it happend on 3 different places (apart from using the same login at every place.... )
I still dont understand, even with a hacked mail account that they can bypass 2-factor authentification of steam app guard?

Multiple VAC bans on record | Info
Multiple game bans on record | Info
513 day(s) since last ban

Ok

The author of this thread has indicated that this post answers the original topic.

pckirk Apr 13 @ 10:42pm

Originally posted by Tjack Morris:
Originally posted by Wolfpig:
If more then one service got phished..... I would check that the one has not access to your mail account (aka immediately change passwords on that) as that would be the most logical cause that it happend on 3 different places (apart from using the same login at every place.... )
I still dont understand, even with a hacked mail account that they can bypass 2-factor authentification of steam app guard?

Last edited by pckirk; Apr 13 @ 10:43pm

Tjack Morris Apr 13 @ 11:02pm

Originally posted by pckirk:
Originally posted by Tjack Morris:
I still dont understand, even with a hacked mail account that they can bypass 2-factor authentification of steam app guard?

Because you were phished on your computer. They grabbed the session token from that 30 second 2fa, along with your login info. that is the only way. with all 3 parts of the key, they could use that at any time to log in as you, since they had the 2fa session token code, steam thinks it is you.

The only way to get all 3 parts of the key is from your computer, you were phished.

I never knew people could do this.
However i think i found the fault:
I had downloaded a cracked version of premier pro, there was a file named setup.exe....
Windows obviously detected it was a torrent however i thought it was still legit (many other things like mods get flagged as viruses by defender)
I marked it as "safe" or whatever it is called and started it, but nothing happened.
Now that i unmarked it windows immedietly removed it.
If something else ever gets hacked again even tho i have changed the passwords i will reset the pc.
Thanks

RPG Gamer Man Apr 13 @ 11:05pm

I suggest to stop using sites like facebook and discord if you get phished this easy. It is already hard on steam due to scammers, but the more places you expose your information in, the more likely you will get phished OP. So stop using those sites or it may happen again in the future.

#10

RPG Gamer Man Apr 13 @ 11:06pm

Originally posted by Tjack Morris:
Originally posted by pckirk:

Because you were phished on your computer. They grabbed the session token from that 30 second 2fa, along with your login info. that is the only way. with all 3 parts of the key, they could use that at any time to log in as you, since they had the 2fa session token code, steam thinks it is you.

The only way to get all 3 parts of the key is from your computer, you were phished.
I never knew people could do this.
However i think i found the fault:
I had downloaded a cracked version of premier pro, there was a file named setup.exe....
Windows obviously detected it was a torrent however i thought it was still legit (many other things like mods get flagged as viruses by defender)
I marked it as "safe" or whatever it is called and started it, but nothing happened.
Now that i unmarked it windows immedietly removed it.
If something else ever gets hacked again even tho i have changed the passwords i will reset the pc.
Thanks

No wonder, you got a pirated game. People put viruses all the time in those. You did this to yourself. This is why people warn about not getting pirated games. Learn from this and next time legally buy the game.

Last edited by RPG Gamer Man; Apr 13 @ 11:06pm

#11

pckirk Apr 13 @ 11:49pm

well guess OP got what he deserved for his rude comment. Oh well, on to the next Help I have been hacked thread....

#12

RPG Gamer Man Apr 13 @ 11:52pm

Originally posted by pckirk:
well guess OP got what he deserved for his rude comment. Oh well, on to the next Help I have been hacked thread....

lol..yea, this is when people call themself out for using a pirated copy of a game. Remember the one for batman asylum where they could not fly? It was a bug made only for the pirated version of the game. So when they complained about it, everyone knew they were using a pirated version of a game..lol.

#13

datCookie Apr 13 @ 11:53pm

Originally posted by RPG Gamer Man:
Originally posted by pckirk:
well guess OP got what he deserved for his rude comment. Oh well, on to the next Help I have been hacked thread....

lol..yea, this is when people call themself out for using a pirated copy of a game. Remember the one for batman asylum where they could not fly? It was a bug made only for the pirated version of the game. So when they complained about it, everyone knew they were using a pirated version of a game..lol.

That's not what got him banned xD

#14