此主題已被鎖定
azwethinkweiz 2017 年 4 月 15 日 下午 5:39
Just lost < $500 to a scammer using a TeamSpeak server + an error message.
Title pretty much sums up my grief.
I thought something seemed off, but my trustworthy inner dumbass allowed myself to install this patch for "teamspeak."

User added me to invite me to competitive play, which I don't even play but whatever.
Wants me to use teamspeak so we can play efficiently, whatever.
I dont use it personally, so I was ignorant, and listened to the scammer.

My steam account dropped offline, and was completely replaced with a fake steam, a trojan at that. 14 different threats detected in the file system so far. (scanning as I type)

[Trojan.FakeSteam.Gen] x14

Next my steam guard was completely useless, the phone authentication didn't do anything to help me, nor did my email. Both of those would not let me sign in.

Now that I've spent 15 minutes with the wonderful steam support, all of my items in TF2 are just plain gone. Wiped from existence.

Now I also have to reinstall steam, and hope the damage doesn't continue, or is any more severe.

And to hell with you Valve, you don't have control over the hackers.

I thought the phone authentication made it harder for scammers.
Instead it just wasted MORE of my time.

I think I'm done.

User's name was - at the time.
最後修改者:Spawn of Totoro; 2017 年 4 月 15 日 下午 8:40
< >
目前顯示第 121-135 則留言,共 151
darksouls 2017 年 4 月 16 日 下午 5:20 
If infection of your computer is still enough to get by that 2 way protection, and especially getting by trade holds instantly, why do we actually have it?
BossGalaga 2017 年 4 月 16 日 下午 5:28 
Its strange how you say the same things as before steam auth was introduced.

If infection of your computer is still enough to get by that 2 way protection, and especially getting by trade holds instantly, why do we actually have it?

Simply giving 15 day trade hold for phone number change would solve this.

Because smart people don't accept friend requests from random people, click on random links from random people and actually have updated/active antivirus that can stop such software from running or at the very least prompt them before they install it.

I've never had my account hacked in 13+ years yet I have to endure all of these restrictions. Steam already has two 2-factor authentication systems, three if you use 2FA on your email.

A user has to bypass and ignore a ridiculous amount of warnings to be scammed or hijacked.

It wouldn't matter if Steam added retinal identification. People would still fall for phishing scams and trojan/rat viruses.

And it's usually due to greed. Someone offers them some fabulous too-goodto-be-true trade and tells them to just click here or promises them something in return and they ignore the red flags and fall for it anyway.
Chompman 2017 年 4 月 16 日 下午 5:29 
引用自 Hell is Earth
If infection of your computer is still enough to get by that 2 way protection, and especially getting by trade holds instantly, why do we actually have it?
It's been said why in earlier posts multiple times so no need to quote that with no discussion.
最後修改者:Chompman; 2017 年 4 月 16 日 下午 5:29
PsydeFX 2017 年 4 月 16 日 下午 5:46 
引用自 BossGalaga
Its strange how you say the same things as before steam auth was introduced.

If infection of your computer is still enough to get by that 2 way protection, and especially getting by trade holds instantly, why do we actually have it?

Simply giving 15 day trade hold for phone number change would solve this.

Because smart people don't accept friend requests from random people, click on random links from random people and actually have updated/active antivirus that can stop such software from running or at the very least prompt them before they install it.

I've never had my account hacked in 13+ years yet I have to endure all of these restrictions. Steam already has two 2-factor authentication systems, three if you use 2FA on your email.

A user has to bypass and ignore a ridiculous amount of warnings to be scammed or hijacked.

It wouldn't matter if Steam added retinal identification. People would still fall for phishing scams and trojan/rat viruses.

And it's usually due to greed. Someone offers them some fabulous too-goodto-be-true trade and tells them to just click here or promises them something in return and they ignore the red flags and fall for it anyway.
And this is all I'm saying. We agree on that it sucks to have to jump through hoops for the gullibility of some. But we do.

But it doesn't matter anymore, we're here, and we have to deal with it. But we could render the hijack almost useless if there were just 15 day holds on device change. This could have been avoided. He had a sense of security that he didn't actually have.
azwethinkweiz 2017 年 4 月 16 日 下午 6:03 
Spawn Of Totoro, I have MalwareBytes, and it's highly efficient at scanning my entire HDD.
I mentioned somewhere ago, that it was strange to me that it said nothing about this progam. I don't scan everything I download from the internet, but I always scan .exe's. And to my honest belief, I genuinely thought it was teamspeak software. It was a seemingly clean file.
And I also mentioned that I moderate a dodgeball server, so I get random adds very frequently.
I was under the impression this user, (scammer,) just wanted someone to play competetive with.
And yes, I know already, had it been a snake I would be bitten.
But I also think that Muppet has a valid point, that a device change doesn't trigger a penalty, however switching a computer does.
Muppet among Puppets 2017 年 4 月 16 日 下午 6:09 
In the past thiefs needed people without protection to steal from them quick.

Now thiefs need people with protection to steal from them quick.
BossGalaga 2017 年 4 月 16 日 下午 6:09 
引用自 Prick
Spawn Of Totoro, I have MalwareBytes, and it's highly efficient at scanning my entire HDD.
I mentioned somewhere ago, that it was strange to me that it said nothing about this progam. I don't scan everything I download from the internet, but I always scan .exe's. And to my honest belief, I genuinely thought it was teamspeak software. It was a seemingly clean file.
And I also mentioned that I moderate a dodgeball server, so I get random adds very frequently.
I was under the impression this user, (scammer,) just wanted someone to play competetive with.
And yes, I know already, had it been a snake I would be bitten.
But I also think that Muppet has a valid point, that a device change doesn't trigger a penalty, however switching a computer does.


Does Malwarebytes Anti-Malware replace antivirus software?[support.malwarebytes.com]

Malwarebytes Anti-Malware is NOT meant to be a replacement for antivirus software. Malwarebytes Anti-Malware is a complementary but essential program which detects and removes zero-day malware and "Malware in the Wild".
Teksura 2017 年 4 月 16 日 下午 6:10 
引用自 PsydeFX
引用自 Teksura
That's literally all you have been doing in your past 3 posts, but if you're going to stop and go back to repeating something I've already said in this thread, that's fine. thank you for putting an end to it. It was getting silly.
No, you just need to realize that there is a difference between perception of the words. there are 3 main types of semantics that only the OP can clear up. You're cherry picking my posts to completely ignore and distract from the point (that I've repeated in all 3 of my prior posts).

SMA is intented to protect your inventory by removing it to the device's control and away from the PC side to be completed. If you can give your entire account away through the PC, and then the hijacker can then take control of what device the SMA is on through the pc without the 15 day cool down, then what exactly is SMA protecting from? It's clearly not the moving of items as the MOST CRUCIAL part of the security can be changed and used instantly.

Without the 15 day cool down, it's just as innefective at keeping items secure as it was BEFORE SMA. THAT is the point. Argue what else you want.
All of those are things I had already said, and not what you were disagreeing with when you responded to my post. This is what you were disagreeing with:

引用自 PsydeFX
引用自 Teksura
Actually according to the OP, they realized they had just downloaded a malicious program when it suddenly hijacked their system and appeared to kick them off their Steam account. At which point they started trying to regain access... From the infected computer... By providing it the infected computer with critical security information. I'll say it again, the critical security information was entered on the infected computer, which was known to be infected. Instead of doing a much more senable thing like cleaning the computer off first, or trying to access from a clean system.

So "trying to get in your car" isn't a good analogy. A better analogy is like "Trying to get into your car by handing the keys to a bunch of thugs who you see are trying to break into your car, and asking them nicely to please unlock the door for you."
No, OP was suddenly disconnected from steam, and he then tried to get into the account. It wasn't until two failed attempts and him checking his email that he realized.


It's not cherry picking to respond to the topic you tried to argue over. But I guess you're not as done as you said, and still want to argue about it. But if you do, please stop trying to pass it off like you were really saying something different, that's called a red herring.
最後修改者:Teksura; 2017 年 4 月 16 日 下午 6:17
Muppet among Puppets 2017 年 4 月 16 日 下午 6:17 
Lets stay on topic.

Does it make sense for anyone that a thief can trade instantly, even though you have steam auth enabled?
Teksura 2017 年 4 月 16 日 下午 6:20 
Lets stay on topic.

Does it make sense for anyone that a thief can trade instantly, even though you have steam auth enabled?
I've said before that it should be putting a hold whenever a new device is enabled. However, we should also be aware that there is only so much that security can do. In the end it falls to the user to be responsible. No amount of security can protect people from themselves, and we do have to be aware that there will always be people who manage to give access to bad people.
azwethinkweiz 2017 年 4 月 16 日 下午 6:24 
While yes you aren't wrong, people will always fall for scams.
If said security measure were in place, I might still have my items, because they would have been stuck in a trade hold that I could cancel.
Muppet among Puppets 2017 年 4 月 16 日 下午 6:49 
引用自 Teksura
No amount of security can protect people from themselves
Thats actually not that much of a justification for keeping a weak spot (in terms of handling of trade holds) which gets misused.
Teksura 2017 年 4 月 16 日 下午 7:52 
引用自 Teksura
I've said before that it should be putting a hold whenever a new device is enabled. However, we should also be aware that there is only so much that security can do. In the end it falls to the user to be responsible. No amount of security can protect people from themselves, and we do have to be aware that there will always be people who manage to give access to bad people.
Thats actually not that much of a justification for keeping a weak spot (in terms of handling of trade holds) which gets misused.
Never said it was, and this would have been obvious in your own post if you hadn't carefully picked a partial sentence out of the larger statment. I've added it back in for the sake of contrast, which now makes it look like you have no idea what you're responding to since you're literally responding to me saying "we should have this" by arguing "that's a poor excuse for saying we shouldn't have the thing you just said we should have".

Now, would you kindly refrain from putting words in my mouth purely to get confrontational over a fact that has been stated by several people? Unless you dispute the idea that people will always be a weak spot to any security system, I see no reason to get confrontational over that being stated. And if you do dispute that, kindly dispute that instead of disputing something which is the exact opposite of what you delete from my post while quoting it. I much prefer to have discussions involving what I said, rather than what someone wishes I had said instead.
最後修改者:Teksura; 2017 年 4 月 16 日 下午 8:15
PsydeFX 2017 年 4 月 16 日 下午 8:45 
...

anyway, back to topic, It would make sense to have the 15 day hold on device change to minimize this and make SMA stronger at what it's supposed to do.

As it is now, there is still a way to instantly trade your items, what SMA was supposed to prevent from happening in the first place, the whole point of it. This needs to be fixed. How often are we switching devices? I'd wager that for the average user, not that often...
Hextravert 2017 年 4 月 16 日 下午 9:06 
And to hell with greedy, gullible, and irresponsible Steam users like you. :DEALWITHIT:

引用自 Prick
And to hell with you Valve, you don't have control over the hackers.
< >
目前顯示第 121-135 則留言,共 151
每頁顯示: 1530 50

張貼日期: 2017 年 4 月 15 日 下午 5:39
回覆: 151