escladders Steam hack/scam

[Plumpy'nut]

Hey folks,

Has anyone else gotten messages from people on their Steam friends list asking to help them vote for their team and "if we will get into top 20 i'll drop you a few keys as thanks?"

They include a link for escladders team "1impuls1ve"

I clicked the link thinking it was friendly, since it came from a friend on steam. About a week later, today, I leave the PC for some food, and come back to see my entire friends list gone, and my steam name changed to a bunch of numbers. Apparently my Steam account was hacked and I had sent the exact same message to my own friends list.

Does anyone know what the intention of the hack was? Is my computer at risk indefinitely - does the hacker have remote access to my PC? If so, what steps should I take?

I've already run a full virus scan on my PC - none were found.

Any help or shared experiences would help.

Thanks!!!!

[Muppet among Puppets]

scan for malware https://www.malwarebytes.com/
deauthorize all devices https://store.steampowered.com/twofactor/manage
change your password on a clean computer.
generate new back up codes https://store.steampowered.com/twofactor/manage
revoke the api key https://steamcommunity.com/dev/apikey

[EmoSchizophrenic]

did you put in your details or did you just click the link?

[ReBoot]

Originally posted by Smurfington:

I've already run a full virus scan on my PC - none were found.

Malware ain't the only menace there is, you need to be aware of phishing[en.wikipedia.org].

[Grey Wind]

i got a same message today as it came from my friend so i clicked on the link but nothing has happened yet as i didn't sign in on the website to vote for his team

[Brujeira]

Originally posted by LaxrLaxity:

i got a same message today as it came from my friend so i clicked on the link but nothing has happened yet as i didn't sign in on the website to vote for his team

Good, now go do your malware scans just in case.

[Grey Wind]

Originally posted by Brujeira:

Originally posted by LaxrLaxity:

i got a same message today as it came from my friend so i clicked on the link but nothing has happened yet as i didn't sign in on the website to vote for his team

Good, now go do your malware scans just in case.

thanks dude 10 malwares found wtf!!

[crashpoum]

I also got this message today! Didn't login to steam from that link either. Funny thing, after telling the friend that sent me this (who i knew to be legit) that it's a scam, he removed me and/or blocked me.

[Muppet among Puppets]

Originally posted by crashpoum:

Funny thing, after telling the friend that sent me this (who i knew to be legit) that it's a scam, he removed me and/or blocked me.

They send messages with the accounts they hijacked

[Zekiran]

Your 'friend's accounts are compromised already.

If you know the person who owns the account IN REAL LIFE, contact them with regards to recovering their account. Otherwise, it's time to block/report for scamming/ignore them and move on.

[Plumpy'nut]

Originally posted by Awooplayer:

did you put in your details or did you just click the link?

I did. What I didn't realize or remember until later is that I did end up logging into steam, and applying my 2FA to login for the "vote". I never ended up voting though. That must have been it.

[Plumpy'nut]

Originally posted by LaxrLaxity:

i got a same message today as it came from my friend so i clicked on the link but nothing has happened yet as i didn't sign in on the website to vote for his team

If you didn't have to login to Steam in any way, I think you're fine.

[Wikaiii]

Hahahah I got that messages too XD
*yup, my mistake for accepting random people. Still, i'm making fun of them⇨unfriend→blocked *
However, Don't ever click the site that looks suspicious

[NineSe7en]

Yo saw this today too, def should spread the word about this one, one of my friends got hit with this one. I don't think this is a malware situation, but you should scan because you can never be too safe. This sounds like a classic phishing scam though. If you sign up you probably are going to get your inventory wiped etc.

[ReBoot]

Originally posted by NineSe7en:

Yo saw this today too, def should spread the word about this one, one of my friends got hit with this one. I don't think this is a malware situation, but you should scan because you can never be too safe. This sounds like a classic phishing scam though. If you sign up you probably are going to get your inventory wiped etc.

When you cross the line between caution and paranoia, its too safe. But if you want to opt into paranoia (or "never too safe"), scanning is useless. If you suspect malware, nuke. That is, reset.

[FROYO Rando Blueberry King Jesus]

Originally posted by harlen333:

I just got this message today.
It was from a jumble of numbers for a username so that fits the description, Team 1mpuls1ve also, the thing for me is that I looked through my friends list and they aren't there at all, this was a random account contacting me I think.
I didn't click the link, blocked all communication to the account, my username hasn't been changed, I'm doing a virus and then a malware scan to see what more needs to be done.
Is anyone getting these from accounts unrelated to them?
Can anyone tell me if I'm safe from just avoiding it?
Edit: Things are looking good right now, no viruses, the only thing that popped up as malware was the Windows Loader I used in 2016 so nothing I don't recognize. Call it "so far so good" I guess.

Are they really still around?