Someone keeps hacking my account

[petervautier]

For the last 2-3 weeks my account keeps getting hacked, within a day of me changing the password. My passwords are strong, with a mix of letters, numbers and symbols.
I have scanned my computer with about 5 antiviruses and malware scanners and rootkit scanners, and nothing has been found. I have Steam Guard, so I get text messages and emails informing me of this.
I'm getting confused because no attempt has been made to purchase anything, and I am wondering if it is a false alarm? My passwords are really hard to crack, so I don't know how they would do it.
I have a VPN, so I am wondering if Steam is thinking that the VPN is another computer,? but my VPN is supposed to go through the USA, but the computers that are logging in are in Europe, mostly Switzerland....

Would appreciate some advice!

[Zekiran]

Początkowo opublikowane przez Razorfish:

WHY? are you using a VPN........ to run a game....

That too.

While there are indeed legitimate reasons to use them, Steam forbids them for most of their games and services, because of fraud and trying to get around purchase restrictions in countries.

[wfergv]

LOL

[Supafly]

Początkowo opublikowane przez Razorfish:

WHY? are you using a VPN........ to run a game....

Likely because OP's VPN doesn't havew split tunnelling, split tunneling doesn't work correctly or they don't know how to use it.

My Current VPN has spilt tunneling but To get it to work I have to use certain options and that results in either Leaks or prevents various things accessing the net completely. I've used Various VPNs without Tunneling Steam Data outside the VPN. Never had an issue. I make sure it's connected to a UK server even if I'm just on the forums and I don't make any purchases or game while connected.

[Mr Cairo]

Just came here to ask same question for the last few days I have had the same issue, I never give out my details to anyone and my account has been safe for 8 or 9 years but this week its gone insane ... password change request after password change request and none by me

I changed my email I changed my password then started getting requests to my new email address

they seem genuine enough

[[☥] - CJ -]

well, one way to see if you're actually being hacked is to make a dummy steam account and see if the same thing happens to it

[Zekiran]

Początkowo opublikowane przez Suicidal Monkey:

When you get compromised you need to do everything in this list

Scan for Malware/virus https://www.malwarebytes.com/mwb-download/
Deauthorize all devices https://store.steampowered.com/twofactor/manage
Change your Account password on a secure device, mobile phone for example.
Generate new back up codes https://store.steampowered.com/twofactor/manage
Revoke the API key https://steamcommunity.com/dev/apikey


If you didn't do the last one then no matter how many times you change password it won't matter because hijackers can still access your account using your API key

Początkowo opublikowane przez Mr Cairo:

Just came here to ask same question for the last few days I have had the same issue, I never give out my details to anyone and my account has been safe for 8 or 9 years but this week its gone insane ... password change request after password change request and none by me

I changed my email I changed my password then started getting requests to my new email address

they seem genuine enough

Again, please read and complete the above list of things if you believe your account is being compromised.

NO ONE's accounts are 'hacked'.

They may be PHISHED. So do those things to ensure your account's security.

Also: never trade off steam - ever, under any circumstance. Never trade for things you cannot confirm by clicking both the account's validity and the item's. NEVER give your steam creds out ANYWHERE. EVER. Never share your account. Do not use off-steam sites.

And when all else fails, turn your inventory private. that shuts up tradebots and takes the spot light off your stuff that they want to steal.

[Mr Cairo]

I never do any of that I have been a steam user for 15 years and never an issue but this last few days ....

I only login through the desktop portal or from saved links to this site that I have used for years ..

I never use other computers steam is only on my main PC ... never share my details only buy through the store, never trade games

I keep it as secure as i can ....but something has happened this week

Regardless I have changed all my details, de authorised all devices and set up the app on my phone as an extra measure ... should be ok now

[petervautier]

Yup, I'm the same. Been using Steam since about 2009 and never had a problem.
Got another SteamGuard email today when I was at work. My computer was at home and switched off.
Don't know if the VPN is causing the issue, had it for about 6 months without a problem. I use VPN because I have blocked gaming on my home router so the kids do their homework. Will set it to reroute to the UK, at the moment it was the US. However the IP address that attempted to get into my account today was in Poland. Yesterday it was North Korea (NK)? lots of attempts from Zurich, Germany and some East European countries.
You may be right, the email might be fake, or it could be delayed.
I never give my credentials to anyone, and don't trade on Steam. I just use it to play Skyrim and Elite Dangerous, all in single player mode - casual gaming.
I'm going to change the pw yet again, this time writing it down on paper old school.

[!Zosma!Kiddara!EXAVOLT]

Maybe your kids are trolling you ? :P

[!Zosma!Kiddara!EXAVOLT]

The only surprising thing is. That steam does not add feature like google. If you log on your account it keeps the Data from where you logged. It say the IP and Location. Steam should actually done that soo when someone is trying to access your account at least you know from where is he accessing. Not like this you can only guess who is trying to access it

[Mr Cairo]

Początkowo opublikowane przez !Zosma!Kiddara!EXAVOLT:

Maybe your kids are trolling you ? :P

Lol there's no way I would give my son my login I would have 10000's spent on skins, modes extra dlc etc :)