Endless Steam Support Emails in Russian

[eeeboy]

In the last 2 days I have received what seems like an endless stream of Steam support emails in Russian.

I'm not daft enough to believe that they are real, and I've also received legitimate emails from steam regarding Steamgaurd etc.

My question is how do I make the rogue emails stop?

[ReBoot]

The same way you deal with all kinds of spam: Mark them as spam and let your mail server handle them.

[Astraea Kisaragi]

Somebody is trying to get into your account it seems. If you use Gmail, the domain name should be displayed and my 2 cents that is nowhere close to Valve.

[eeeboy]

Originally posted by Astraea Kisaragi:

Somebody is trying to get into your account it seems. If you use Gmail, the domain name should be displayed and my 2 cents that is nowhere close to Valve.

I'll have to investigate more, but they are all pretty legitimate looking as far as domain and digital signature go

[ReBoot]

Why should they be in Russian then?

[eeeboy]

Originally posted by ReBoot:

Why should they be in Russian then?

I wasn't trying to say that the emails are legit, just that they are smarter than the average phish

[ReBoot]

How have you verified the digital signature?

[eeeboy]

Originally posted by ReBoot:

How have you verified the digital signature?

Trying to work out how to do it from my phone

[ReBoot]

This doesn't make sense. You said the signature is valid. Now you say you're trying to work out. So what is it?

[eeeboy]

I'm sorry to have angered you so. Here is the gmail security report

Message ID <[e-mail]>
Created on: 30 November 2016 at 15:38 (Delivered after 0 seconds)
From: Поддержка Steam <[e-mail]>
To:
Subject: Недавние изменения вашего аккаунта Steam
SPF: PASS with IP 208.64.202.39
DKIM: PASS with domain steampowered.com

[ReBoot]

You have not angered me, I just wanted to point out that you have a discrepancy in what you say.

[cSg|mc-Hotsauce]

that is valves ip.

https://db-ip.com/all/208.64.202



edit: and this discussion too...

https://steamcommunity.com/discussions/forum/1/350540973993913278/

[ReBoot]

Well, this indeed looks valid. Looks like someone is indeed trying to access your account.

[eeeboy]

So I guess my best bet is to hide behind my authenticator and wait until they get bored

[ReBoot]

No. Find out how they got your password.

[cSg|mc-Hotsauce]

support can be given in the users own language. someone is trying to gain access by using steam support and login info. it shoots you an email in the language they chose on the support site.

scan your system for any trace of malware.