Account Hijacked on the 18th

[DragonsREpic]

this is my convo to Steam support (thy blame me)
bare with me its a bit long but they just copy paste.
I am asking for an outside perspective

Message from you on Mar 19 @ 11:17pm | 2 days ago
I am looking EVERYWHERE to get help with my issue. I think my account was hacked on the 18. My email out of no where was getting FLOODED with trades saying I had posted random trades and 5 items baught after. I want my items back as this was clealy not me. over 100 cards/items were sold in just a few minutes. Thats flat out impossible!
NO I have NEVER nor WOULD give my account details to anyone. Nobody knows by my self. I don't know what happend but it was completly out of no where. I dont see anything else wrong but the cards/ items sold/bought. Can you remove the history too? I can't find help anywhere please help. I wasn't even on steam!
DragonsREpic
Message from you on Mar 19 @ 11:21pm | 2 days ago
I have been using Steam since 2011 and this has NEVER happend before. My life is on Steam. Please tell me how to fx this mess. I beg you Support!. I don't know what to do to fix this mess
Message from Steam Support on Mar 20 @ 12:31pm | 1 day and 21 hours ago
Hi,

Thank you for reaching out Steam Support.

I'm sorry that you account was hijacked.

It appears that the account was indeed compromised. Upon checking, it looks that you were able to secure it with the password reset. Since the credential change we do not see any new logins from other locations or devices.

I've reviewed the account's security history so let me provide you some details on this hijacking.

It looks like the hijacker accessed your account first time on 23-10-2023. They knew your account name, password, and had your authenticator code from the Steam Mobile app on your phone. In most cases, hijackers get this information through phishing sites. These sites look legitimate and are often tied with trading or tournaments but are intended to steal your login details - sometimes the malicious sites can even look like the Steam.

The other way this might have happened is through malware. Note that not all malware is detectable by anti-virus software, especially if it's newer malware or malware that's hardly used. Even though you have anti-virus on your device, it may not always detect malicious software. Accounts that become hijacked using malware often may not show any signs of being accessed outside of your region.

After ensuring that your computer is secure, please update the password to your e-mail account and any other accounts you have recently logged into.

Also, please closely review our Account Security Recommendations.

I'm sorry but all Community Market transactions are final and cannot be reversed or refunded. When an item is purchased from the Community Market, the cost is sent from the buyer's Steam wallet to the seller's. Reversing these purchases would mean we have to take funds out of the seller's wallet, creating confusion and possible purchasing issues across Steam.

Again, I'm sorry we can't be of more help with this, but we don't reverse or refund Community Market purchases and sales. We also do not restore stolen or lost items.

Additional information can be found in our Community Market and Steam Item Restoration Policy articles.

Steam Support
Kami
DragonsREpic
Message from you on Mar 20 @ 12:54pm | 1 day and 21 hours ago
I absolutely do not believe it was accessed from 2023. That's impossible. Nothing happend until the 18th. I talked to a friend of mine and was just informed that its because I was using Windows 7 knowing that at the time I dont have the money for a new computer and that my system built in 2015 was to old to change saying the good news is that they lowered the requiermnts but I have to buy some license. He recommended Linux/SteamOS knowing I absolutely despise anything after windows 7. The 18th is when everything happend. I called my mom as I was not at my desktop that had W7 and she unplugged it for me which is strange bc I have cellular internet router. So I dont really know what happend. Its like im being punished for being poor. its so ♥♥♥♥♥♥ up and unfair. My 2FA didnt even stop it. I was never told ANYTHING untill the trades were being posted and of course they sold quickly. Why isnt literal identity theift being stopped. Why didn't 2FA even work. I NEVER told ANYONE my passwords. I didnt even conform trades eaither Seconds befor I did noticed it wanted me to conform trades. Bc I never had my steam hacked before I didn't know any better. I was caught completly of gaurd. I was on youtube and didnt touch steam!

Im autistic and Steam has been a massive part of my life. It actually keeps me sane. I grew up extreamly alone with no siblings so gaming has been extreamly importaint to me. I never asked this. I have done nothing to nobody. Suchs thing every so often happen behind my back its extreamly immoral. Chances are I would be in prision If i met such unscupulous "people". Its just not fair. I didn't ask for any of this...
Message from Steam Support on Mar 20 @ 8:57pm | 1 day and 13 hours ago
Thank you for waiting. We understand how you feel about this.

For your question, I will provide more information to clarify about this hijacking event.

We have noticed that there was suspicious login attempt on 23-10-2023. Since that day, you have not updated your account password until 18-03-2025. Hijackers might get your account information through malware and started to compromise your Steam account on 18-03-2025.

Hijackings involving malware are often done using similar methods to phishing sites or social engineering, except that the goal is to get the user to install software that will compromise their computer. Since auto login is common, if a hijacker gets access to a computer, they usually can access a users Steam account and email accounts. For instance, a hijacker might convince a user to download malware by convincing them that it's a plugin or communication software needed to play in a tournament.

We have some tips for removing malware from your computer here. It may be a good idea to contact a local computer security expert if you're having trouble removing this malware. After ensuring that your computer is secure, please update the password to your e-mail and any other accounts you have recently logged into.

If you haven’t yet, please take a look at our account security recommendations article, which outlines ways you can protect your account and what to watch out for.

If you have further question, please let us know.

Steam Support
Matt
DragonsREpic
Message from you on Mar 21 @ 10:29pm | 11 hours ago
You clearly haven't read my message at all and gave a similar response to your previous on. Please read it.

I have already changed my password as you have stated from the beginning.

You mentioned that all trades are final which is funny because I never even sold or bought anything to my knowledge. All Items were earned and never purchased. So Technically its not final.

2FA never even worked. So how the hell did they even get in?

You never mentioned about my friend what so ever.

You never mentioned Window 7 because I am poor

I have many screenshots I can send next if need be that are on my phone I took. Which you absolutely need to see.

You are claiming it was autherized a year and 4 months ago. I took a screenshot it says it was from Sha Kiu Tsuen, Hong Kong, HK with an IP address of 103.97.2.41

I removed the device from my account when I saw this.

Please understand my position and have compassion

You are basicly saying that it was accessed where I normal live in America.
Then you say Hong Kong too? Now what do you think are the chances I would randomly go to Hong Kong when I have no will, reason or money to? If you read this will you give me the answer to 45 + 20 = x. Find x

See how this email is a respectful response to yours and not a copy/paste?

If your just going to do this copy paste. I want someone who actually cares about us gamers.

I show you respect, so please show me the same

This is Steam. I expect someone to at the very least to read my message and not a copy paste with things I already know.

This is lit like going to the police and saying your car is gone and there only response was you just drove your car in Hong Kong.
DragonsREpic
Message from you on Mar 21 @ 11:02pm | 11 hours ago
Screenshots I took
Files attached: Screenshot_20250318-143221_Steam.jpg Screenshot_20250318-134057_Steam.jpg 20250319_222347.jpg
DragonsREpic
Message from you on Mar 21 @ 11:03pm | 11 hours ago
Wait I cant look to make sure its the correct screenshots and that does t contain non steam personal info?
Message from Steam Support on Mar 22 @ 6:06am | 4 hours ago
Thank you for your patience and reply.

We understand your situation.

Don't worry. The screenshots you provided only include the Steam related information.

I could see you had authorized the suspicious login on 10/23/2023 PT.

You had to received a notification to deny or approve this login in mobile App, and it looks like you approved the login.

Something like this could happen if you logged in to a 3rd party websites using QR feature.

The other way this might have happened is through malware.

Hijackers can use malware to gain access to your computer and login to your account using your already authorized device. Since your Steam account could be logged in or you have your account credentials saved, the hijacker does not need to know anything about your account to gain access.

We have some tips for removing malware from your computer here. It may be a good idea to contact a local computer security expert if you're having trouble removing this malware. After ensuring that your computer is secure, please update the password to your Steam account, e-mail, and any other accounts you have recently logged into.

But just a heads up that there are several ways that a hijacker might use to get a hold of an account that's why we recommend that you check out our Account Security Recommendations.

I’m sorry to hear that your account was used without your permission.

I understand that it's upsetting to hear that we can't restore your items and reverse Market activity. I also know that your items are valuable to you, so I want to help you get the right tools and information to keep your items secure.

Again, I'm sorry we are not able to restore your items.

To learn how to avoid scams or hijackings, please see our Trade Scam article.

Since there's not much more that I can say or do to be of help with this particular issue, I am going to close this help request.

If you have questions on an unrelated issue, please create a new help request and we will be happy to help you.

Steam Support
Lucy

[DragonsREpic]

Ursprünglich geschrieben von Heraclius Caesar:

OP, just like all the other users that come through here and make threads just like yours on a daily basis, you gave away your Steam login information to some shady site/individual.

You have only yourself to blame. This was an easily avoidable scam. Good luck to you & have a beautiful weekend! :cool_seagull:

even if i did you assume like you never made a mistake in your life. I don't know what others. im not them, i have said but I do hear how common scams are. I think its inevitable Im thinking the average person has been scammed in some way a least once. Even scam baiters have been scammed so dont inply that im stupid please. Its not about being smart. its about being causious and aware

[C²C^Guyver |NZB|]

Ursprünglich geschrieben von DragonsREpic:

Ursprünglich geschrieben von Heraclius Caesar:

OP, just like all the other users that come through here and make threads just like yours on a daily basis, you gave away your Steam login information to some shady site/individual.

You have only yourself to blame. This was an easily avoidable scam. Good luck to you & have a beautiful weekend!

even if i did you assume like you never made a mistake in your life. I don't know what others. im not them, i have said but I do hear how common scams are. I think its inevitable Im thinking the average person has been scammed in some way a least once. Even scam baiters have been scammed so dont inply that im stupid please. Its not about being smart. its about being causious and aware

I haven't. Valve puts the info out there. Users have to read it.

[Haruspex]

Ursprünglich geschrieben von DragonsREpic:

even if i did you assume like you never made a mistake in your life. I don't know what others. im not them, i have said but I do hear how common scams are. I think its inevitable Im thinking the average person has been scammed in some way a least once. Even scam baiters have been scammed so dont inply that im stupid please. Its not about being smart. its about being causious and aware

I once gave a scammer about $150 for a stupid packet of paper with instructions on how to apply for a job, because I thought I was getting a job. I was young, in my 20s, and it was stupid. I learned from it though, and I'm unlikely to fall for a similar scam.

My teenage kid learned about Internet security the hard way when he installed a RAT malware trying to crack a PC game. It grabbed his browser session and spent his Steam wallet and drained his bank account by purchasing Xbox gift cards. He had to go through the process of contacting the bank to report the incident, wiping and reinstalling his PC, changing every password ever and enabling 2FA everywhere and locking it all down, and dealing with ongoing scam efforts since now his information is out there. I guarantee he's more careful about what he downloads now.

When someone says, "be smart", they're basically saying to be cautious and aware. It doesn't mean they think you're stupid. I've seen very smart people fall for scams. If you get just a little complacent or your emotions get involved, it could happen to anyone. Knowledge reduces the chances of it happening. The more you learn about how the scams work, the less likely you are to be a victim.

[Chika Ogiue]

Ursprünglich geschrieben von DragonsREpic:

and its ALWAYS from sketcy af places

Your biases against certain countries aside, don't assume that all scams only ever come for a few places. They don't. There are scammers in and from every single country on the planet.

[craigal]

6) I have no idea what an APIKEY is can you explain? Is it safe to click that link you gave me? I look it up something about on your website. I don't have a website. I dont understand.

Yes, that link is safe to click on. If it does show an API key then you should remove it.

[Hammer Of Evil]

Ursprünglich geschrieben von DragonsREpic:

this is my convo to Steam support (thy blame me)
bare with me its a bit long but they just copy paste.
I am asking for an outside perspective

the perspective is:

1- steam is 100% correct about your situation

2- posting the entire exchange removes any doubt in my mind about this.

3- while the blame does lay with the hijacker for the theft (you're free to go find him and put law enforcement to retrieve him for your remedy or damages), you were the one that handed them the keys to get into your account.

4- attempting to evade responsibility for your part in this problem is not advised, as the user that was in control of the pc or device, with admin privileges at the time of being compromised, was you, yourself.

5- you still got your account back. what's the issue?

[DragonsREpic]

Ursprünglich geschrieben von C²C^Guyver |NZB|:

Ursprünglich geschrieben von DragonsREpic:

even if i did you assume like you never made a mistake in your life. I don't know what others. im not them, i have said but I do hear how common scams are. I think its inevitable Im thinking the average person has been scammed in some way a least once. Even scam baiters have been scammed so dont inply that im stupid please. Its not about being smart. its about being causious and aware

I haven't. Valve puts the info out there. Users have to read it.

all im saying is I never had this happend before. this is compltely new. Of course no harm done. I fixed everything. This is just a learning exsperience if anything. I just don't see tearing ppl a knew one is going to help. Like getting mad or god forbid yelling at the elderly saying its all there fault isnt a positive way forward. I keep saying I never logged in anywhere else but my own decives. I don't know exactly what happend but what I will do is check devices every now and then from now on as this is completly new to me. Its just I often find out the hard way.

[DragonsREpic]

Ursprünglich geschrieben von Haruspex:

Ursprünglich geschrieben von DragonsREpic:

even if i did you assume like you never made a mistake in your life. I don't know what others. im not them, i have said but I do hear how common scams are. I think its inevitable Im thinking the average person has been scammed in some way a least once. Even scam baiters have been scammed so dont inply that im stupid please. Its not about being smart. its about being causious and aware

I once gave a scammer about $150 for a stupid packet of paper with instructions on how to apply for a job, because I thought I was getting a job. I was young, in my 20s, and it was stupid. I learned from it though, and I'm unlikely to fall for a similar scam.

My teenage kid learned about Internet security the hard way when he installed a RAT malware trying to crack a PC game. It grabbed his browser session and spent his Steam wallet and drained his bank account by purchasing Xbox gift cards. He had to go through the process of contacting the bank to report the incident, wiping and reinstalling his PC, changing every password ever and enabling 2FA everywhere and locking it all down, and dealing with ongoing scam efforts since now his information is out there. I guarantee he's more careful about what he downloads now.

When someone says, "be smart", they're basically saying to be cautious and aware. It doesn't mean they think you're stupid. I've seen very smart people fall for scams. If you get just a little complacent or your emotions get involved, it could happen to anyone. Knowledge reduces the chances of it happening. The more you learn about how the scams work, the less likely you are to be a victim.

What im NOT going to say is that your stupid and you should feel bad. Nobody should ever be put down. This is lit one mistake since 2011 I had this account. I say thats pretty damn good...I will admit I appaud you that you admit to being wrong. Thats one of the hardest things ppl seem to admit. Everyone has an ego now days...

I had one guy ask me information that was already correct and I said it was. Only for a household say is that a scammer. Then the person hung up. That was the worst scammer I even encountered and was American talking perfect english. That scared the sht outta me. Even some scam baiters have nearly gotten too. Its not about being "stupid" ANYONE can fall for it. Having accurate information was absolutely terrifying and I cant emphisis that enough.

Really the only thing we can do as sane ppl is learn from our mistakes...

Idk about you but all I have gotten here was personal attacks. At least thats how I feel. I shouldn't have to remind ppl to bekind esp when there prob adults. I have had numberous ppl saying im smart and a genious for turning a box truck into a rv with 1600w of solar and on break i would go out and lay down in the ac n the back with my laptop, microwave and fridge. I fix batteries and stuff. Its my autism. I have to do such helpful/productive things or I loose my mind.

As far as maleware Im sure i would have had a lot of accounts stolen but it wasjust my steam and itsalways logged in. I NEVER need to login. Nobody messes with my computer (or would care to eaither)

I have said its likely bc I was using windows 7 for so many years and it had security probelms lately but it seems after looking arund im not the only one.

my only 'crime' is being poor

Yeah I don't download stuff anymore very much and if i do on occation I scan it. Thinking of getting a VM for that just incase for my next build.

I needed a new computer bad anyway. Its lasted just under a decade. If i can do that with my first build I can do it again.

I used limewire back in the day. It was fun. I did get a virus but I was new to pc back in early 2000s with dial up. Funny thing is I dropped the 500gb ext hard drive on some gravel by our appt door (ground floor) and it never booted...prob a good thing, Im sure there were more viruses and god forbid illagal stuff. So everything i had downloaded was on it. that was another learning exsperience

What sucks is u gotta fall for a scam before you know how to avoid them...

[Heraclius Caesar]

Ursprünglich geschrieben von DragonsREpic:

Ursprünglich geschrieben von Heraclius Caesar:

OP, just like all the other users that come through here and make threads just like yours on a daily basis, you gave away your Steam login information to some shady site/individual.

You have only yourself to blame. This was an easily avoidable scam. Good luck to you & have a beautiful weekend!

or maybe dont do evil sht to begin with as its wrong?

Scammers gonna scam. People have been scamming other people since humans started using currency, probably even before that when we bartered instead of purchased. Animals scam other animals.

In a perfect world no one would scam or get scammed. But we don't live in a perfect world. Don't give out your login information and you won't have these problems.

[DragonsREpic]

Ursprünglich geschrieben von Chika Ogiue:

Ursprünglich geschrieben von DragonsREpic:

and its ALWAYS from sketcy af places

Your biases against certain countries aside, don't assume that all scams only ever come for a few places. They don't. There are scammers in and from every single country on the planet.

Im just saying they tend to not have morals for some reason. for the most part of course. Im just saying what I found out nothing more. I know someone who hates black ppl bc of the past and even im agaist that. Not many are from 1st world contries like america or the uk or the land down under. For scams in your area that tends to be on marketplace. While the vast majority of hacks and such come from such countries

[DragonsREpic]

Ursprünglich geschrieben von craigal:

6) I have no idea what an APIKEY is can you explain? Is it safe to click that link you gave me? I look it up something about on your website. I don't have a website. I dont understand.

Yes, that link is safe to click on. If it does show an API key then you should remove it.

What do I actually do sir?
it says register for an web api key and domain name...isn a domain like a url? I don't have a website. But I did take HTML class in 6th grade. Do I need to take more classes to get one?

[DragonsREpic]

Ursprünglich geschrieben von Heraclius Caesar:

Ursprünglich geschrieben von DragonsREpic:

or maybe dont do evil sht to begin with as its wrong?

Scammers gonna scam. People have been scamming other people since humans started using currency, probably even before that when we bartered instead of purchased. Animals scam other animals.

In a perfect world no one would scam or get scammed. But we don't live in a perfect world. Don't give out your login information and you won't have these problems.

The real problem is that there not punished at least not enough. My mom has been getting TONS of random faceboo chats (shes new) turns out she been accepting friends request. with the 2 of us we ended literlly over 500 'relationships in about 12 mins using hotkeys.

So thats something I DO know aobut and hasnt gotten anyone since.

There should be classes on scammers. Hell high school should teach you how to pay ur dam taxes too. I could go on four lit hours. I watch videos constantly and even I say the amount I do know I realise I still know nothing...

My friend said its prob bc I was using windows 7 and its prob not anything I actually did

[Heraclius Caesar]

Ursprünglich geschrieben von DragonsREpic:

Ursprünglich geschrieben von Heraclius Caesar:

OP, just like all the other users that come through here and make threads just like yours on a daily basis, you gave away your Steam login information to some shady site/individual.

You have only yourself to blame. This was an easily avoidable scam. Good luck to you & have a beautiful weekend!

even if i did you assume like you never made a mistake in your life. I don't know what others. im not them, i have said but I do hear how common scams are. I think its inevitable Im thinking the average person has been scammed in some way a least once. Even scam baiters have been scammed so dont inply that im stupid please. Its not about being smart. its about being causious and aware

No, I assume like I've seen the same thread over and over again. And ultimately, my assumption is 100% correct. You gave away your Steam login information just like all the others.

Look, do what you gotta do to make yourself feel better about the situation but I didn't imply you were stupid. Naive perhaps. But I feel that my comment was rather diplomatic all things considered. I even told you to have a beautiful weekend, which is a farewell I generally reserve for people I actually like or who do me a kindness or service.

That being said, try to conceive of how annoying it gets to see this same thread posted every single day. It's such an easy thing to avoid yet ostensibly savvy gamers fall for it and come here and complain. Every day. There are so many threads just like yours already that new ones are essentially spam. It gets old really quick.