Randomly adding friend?

[Xaelath]

That was creepy, i thought i got hacked but theres no suspicious activity whatsoever.
I changed my password and it somehow persist?
Even unfriended me and the person is confused as i was

No my pc doesnt have malware and i wasnt online in pc.
Yes i used steam mobile guard.

[Muppet among Puppets]

If you suspect someone on your account

scan for malware,
do the next things on a secure computer:
change password,
deauthorize other device AND create new backup codes,
revoke api key.

You could describe what happened though.

[Xaelath]

Originally posted by Muppet among Puppets:

If you suspect someone on your account

scan for malware,
do the next things on a secure computer:
change password,
deauthorize other device AND create new backup codes,
revoke api key.

You could describe what happened though.

I mentioned that there's no malware.
I use malware bytes and windows defender.
I didn't logged to PC as the message occured on my phone.

For obvious reason i really doubt there's malware in my phone too.

It just happened then stopped.

Steam guard doesn't mention anything about code means there was no login detected.
As for password changed it still occured once again after i changed it.

It's rather weird because
- I never tried to add the person.
- I blocked the person
- The person is just confused as i am
- Though undeniably that account is suspicious with only CSGO in their library
- I don't play CSGO anymore, neither have an item to trade. My Dota 2 item mostly cheap stuff too, and i am sure if there's hacker it would be gone though Steam would also sent a mail or notification if i traded something or selling something which isn't happening.

I have no clear explanation why though.

[Muppet among Puppets]

Someone has access to your account if friend got added.

Maybe you just caught them, while they tried to plant a "friend" for a trick in the future.

I recommend to do the steps i mentioned to get any possible one out.


Also check here for logins or authed machines.
https://help.steampowered.com/en/accountdata

[Xaelath]

Ah it seems someone hacked through?
Well that's weird , it was from Europe though not on steam,
It was my discord and Amazon

[Muppet among Puppets]

Thats why i said, describe what happened.
Discord, amazon? I am still not sure i see what happened.

[只玩12，谢谢]

ewfwe

[Xaelath]

Originally posted by Muppet among Puppets:

Thats why i said, describe what happened.
Discord, amazon? I am still not sure i see what happened.

I am just confused as you are right now.

[Xaelath]

I found there's someone hijacked on the same time i was active.
It was on Cairo , lol thats not even made sense it seems the hijacker use VPN.

[Muppet among Puppets]

Describe what you have seen.

I see for now that you suddenly had a friend on on your friendlist in steam, who you didnt add or accepted.
That was what i based my recommendation on.

[Muppet among Puppets]

Originally posted by Xaelath:

I found there's someone hijacked on the same time i was active.
It was on Cairo , lol thats not even made sense it seems the hijacker use VPN.

Well, then do this. As my thought seems to be right. Make sure your computer is safe.

Originally posted by Muppet among Puppets:

If you suspect someone on your account

scan for malware,
do the next things on a secure computer:
change password,
deauthorize other device AND create new backup codes,
revoke api key.

[Xaelath]

Originally posted by Muppet among Puppets:

Originally posted by Xaelath:

I found there's someone hijacked on the same time i was active.
It was on Cairo , lol thats not even made sense it seems the hijacker use VPN.

Well, then do this. As my thought seems to be right. Make sure your computer is safe.

Originally posted by Muppet among Puppets:

If you suspect someone on your account

scan for malware,
do the next things on a secure computer:
change password,
deauthorize other device AND create new backup codes,
revoke api key.

I guarantee it is safe, i only use 2 pc which is my laptop and my main one.

Not sure what the cause i am changing all password for now

[Muppet among Puppets]

Do all the steps.
The most vital is the new backup code one.
But only all together will save you.

Your details and guard codes must have leaked. You did (login with steam fake for example) or your computer does.

[Xaelath]

Originally posted by Muppet among Puppets:

Do all the steps.
The most vital is the new backup code one.
But only all together will save you.

Your details and guard codes must have leaked. You did (login with steam fake for example) or your computer does.

New backup code?
Whats that?

[Muppet among Puppets]

Originally posted by Muppet among Puppets:

If you suspect someone on your account

scan for malware,
do the next things on a secure computer:

change password,

deauthorize other device AND create new backup codes, (step 2 and 3 https://store.steampowered.com/twofactor/manage )

revoke api key https://steamcommunity.com/dev/apikey

[Xaelath]

Originally posted by Muppet among Puppets:

Originally posted by Muppet among Puppets:

If you suspect someone on your account

scan for malware,
do the next things on a secure computer:

change password,

deauthorize other device AND create new backup codes, (step 2 and 3 https://store.steampowered.com/twofactor/manage )

revoke api key https://steamcommunity.com/dev/apikey

I deauthorized all other devices,
and created new backup codes, whats next?