Account Keeps Getting Hacked

[[JL]Magneto]

I keep getting Steam Guard emails saying that someone has tried to log on from a new computer, using my correct name and password. This has gone on for a very long time; I have done many scans with Malware Bytes and whatnot, which never found anything.I initially made only small changes to my password, which ultimately would work for a little while and then fail again.

Two weeks ago, I started getting the emails one after another. I would change the password, then get another email within 5 minutes. So ultimately I decided to finally do what I should have done a year ago and choose a truly random, nonsensical password. I just got another email that the password had been input correctly.

Every previous discussion about this topic is full of people saying "oh, you have a keylogger, you must have a keylogger." I really do not think this could be the case with me. For one, it's been happening for a long time....I'm not believing that the most recent Malware Bytes is failing to find a keylogger that is over a year old. Furthermore, why would they go from finding my password within 5 minutes to finding it in 2 weeks if it were a keylogger?

How common are these breaches?
How likely is it that they could just be using a sophisticated password guessing algorithm? Does Steam lock out people who try and fail to login repeatedly?

Is it possible to receive these emails in error?

Also, I have Steam Guard on my phone, but I also get emailed a code. Does that email code even work without the phone code too?


This is so frustrating; I do not even know what these people hope to gain.

[Def-Warrior]

Are you using wifi or cable?

[Muppet among Puppets]

Is the name in the email even your actual account name?

Nvm, you use app codes. Email is fake. Or someone created an account with your email. That would mean, no verification link in email needed?
Normally, it should require that.

[I Really Hate you Guys]

I've been fighting this for over a month. Almost daily i am getting "The login attempt included your correct account name and password." emails. I have scanned the computer using Malwarebytes, Bit Defender, SuperAntiSpyware, etc. I have used my phone instead of the computer to change my password, still getting log in attempts from China and Brazil..

[Muppet among Puppets]

Do you get codes by app?
Did you check the name in the email with your actual account name in steam?

[I Really Hate you Guys]

Codes i get from the steam store, The names are correct and i see no phishing links in the emails.

[Muppet among Puppets]

Originally posted by I Really Hate you Guys:

Codes i get from the steam store, The names are correct and i see no phishing links in the emails.

From the store?

I ask different: Do you get codes by email yourself?

[fastboyslim]

Have you changed your email password if not that is the first thing you should do! sounds like they may have access to your email account!

Also contacy steam support see if they can help suggest any ideas on securing you account further.

hope you get it sorted.

[hyli]

I know you've likely heard this before, but here we go.
> Run an anti virus on any device you regularly use steam with. Your phone, your laptop, whataver.
> Log yourself out of all other sessions.

Steam > Settings > Account > Manage Steam Guard Account Security > Deauthorize all other computers now

> Go on a decive you know is clean, and change the password for your email account AND your steam.

[Muppet among Puppets]

First we should clarify if the email is fake or not for the account.

[Teksura]

Originally posted by Muppet among Puppets:

First we should clarify if the email is fake or not for the account.

Post the address of the sender.

Originally posted by JLMagneto:

Also, I have Steam Guard on my phone, but I also get emailed a code. Does that email code even work without the phone code too?

So, when *you* log in yourself, do you get emailed a code or do you input a code that appears on your phone?

[Muppet among Puppets]

Originally posted by Teksura:

Originally posted by Muppet among Puppets:

First we should clarify if the email is fake or not for the account.

Post the address of the sender.

You can get spam emails from your own address......

About this case here, no one who gains details would be mindnumbing stupid trying to log in all the time while lacking a code.

[I Really Hate you Guys]

Originally posted by Teksura:

Originally posted by Muppet among Puppets:

First we should clarify if the email is fake or not for the account.

Post the address of the sender.

"Return-Path: <[e-mail]>
Received-SPF: pass (domain of steampowered.com designates 208.64.202.37 as permitted sender)"

Originally posted by JLMagneto:

Also, I have Steam Guard on my phone, but I also get emailed a code. Does that email code even work without the phone code too?

So, when *you* log in yourself, do you get emailed a code or do you input a code that appears on your phone?

When i login, i get no emails. I have to input a code from my phone.

[Muppet among Puppets]

Then the emails are not for your account.
Compare the names again.

If the name is actually the same, the email is fake,
if the name is not the same, someone created an account with your email

[可口可乐]

哟哟哟哟

[Denom]

點