Possible Steam Security Guard Scam

[Didz]

I logged into my PC this morning to find I had an emal allegedly from steam. It read:

This email was generated because of a login attempt from a computer located at 109.93.115.161 (RS). The login attempt included your correct account name and password.

The email included a Steam Guard Code, and a secure link for reactivating my account if I am unable to log-in. However, when I tried to log into my account all steam did was ask me to verify my email address which I did via a seperate email sent by steam support at my instigation, and after that there were no problems accessing my account, and no mention of any other attempts to access my account from a different PC.

Out of interest I clicked on the security link provided in the first email to see what happened and the first thing it did was produce a login screen showing my email address (which it obviously knew as it was the address it was sent to, and asking me to enter my password.

Looked fishy to me, so I quit without entering my password.

Thought I'd mention it as it seems a bit odd that steam would send me a message telling me that someone had accessed my account frm a different computer, but not actually mention it when I logged into my account.

[J4MESOX4D]

This is a pefectly legit email from Valve as somebody has made a successful login attempt using a profile name and correct password attributed to your email but Steam Guard has saved you. They would've needed the code you received to actually get into your account. It would appear that as your account is not hijacked that your email isn't compromised yet. You should run full anti-malware scans of your PC immediately and once your device is secure; change your password. You should also consider changing your email one to be on the safe side also.

[Forcen]

Hmm.

Could you copy that link you clicked from the email directly and paste it into this website: https://www.virustotal.com/#/home/url

What was the host domain? Was it the common valve domains or some other thing?

Don't post the full link here just in case, if it was legit then it could be bad.

EDIT: Yes, what James said.
Scan with malwarebytes.com and whatever antivirus you might have.

If you use gmail then do the security checkup at https://myaccount.google.com/security

[Didz]

Thanks guys,

I did as you sggested and the URL came up clean.

So, as you say it might have been a legitimate warning from Steam that someone is trying to access my account. I was just a bit surprised that nothing was mentioned when I logged into my account this morning.

Anyway, I'll change my password as suggested just in case.

[J4MESOX4D]

Originally posted by Didz:

I was just a bit surprised that nothing was mentioned when I logged into my account this morning

If you sign in as normal on a trusted device with the correct credentials; you wont see any warnings. Because a successful access was made on another device; this is what triggered the Steam Guard email protection which alerted you.

Make sure you secure your device first against harmful material else any changes you make such as passwords may get captured and you'll be back to square one again. You can also deathorize all other devices in your Steam Client settings meaning you can only access your Steam account on the device your are using. As long as your email doesn't get compromised where someone can acess your email guard codes too; your account will be protected from a login although you don't want someone having your correct profile name and password at any time.