WTF IS HAPPENING!!??

[Giant Duck]

I have an alt steam account and decided to send my graffiti and steam backgrounds from this account to my alt because I wanted to clean my inventory, so I made the trade and sent it then I notice it took a while for me to get the confirmation on the mobile app (NOT NORMAL) but then I clicked on it to confirm and it said “blue frog is not on your friends list and he recently changed his account name” (blue frog is the name of my alt) i was confused and clicked on blue frogs profile thinking it’s my other account and it wasn’t my ACCOUNT. It was a different account with the same name!!!! So I went back into my trade history and saw that my trade offer to my alt was cancelled and I was sent another exactly the same offer from a different account!! WTF. The account has also been named CS.Money BOT #3 and some other stuff. This actually scared the ♥♥♥♥ out of me... I have a relatively expensive inventory and started to think hat if I offered my knife! ALSO HOW CAN SOMEONE ELSE CANCEL A TRADE OFFER BETWEEN ME AND SOMEONE NOT THEM!?’vb

[Giant Duck]

Ok, so i changed my password and deauthorized all devices then ran malwarbytes which only showed me 2 harmful things that i wanted. Then i tried to send an offer and everything was smooth i got the confirmation alert instanty and it was to the right account. Honestly this is a big deal because scammers can change a bot accounts name cancel an offer with the real trader and redirect the trade to themselves and there is really no way of telling unless you open the account of the bot... This is stupid

[Pluto]

引用自 Giant Duck：

then ran malwarbytes which only showed me 2 harmful things that i kept because they were photoshop cracks and i wanted those.

I have no idea if your problem is fixed yet but I want to point this out.
If I understand correctly, you shouldn't be admitting to piracy, period.

[Giant Duck]

引用自 adam.：

引用自 Giant Duck：

then ran malwarbytes which only showed me 2 harmful things that i kept because they were photoshop cracks and i wanted those.

I have no idea if your problem is fixed yet but I want to point this out.
If I understand correctly, you shouldn't be admitting to piracy, period.
If I'm not understanding correctly, I apologize for inconvenience.

your right.

[Black Blade]

引用自 Giant Duck：

Ok, so i changed my password and deauthorized all devices then ran malwarbytes which only showed me 2 harmful things that i kept because they were photoshop ****** and i wanted those. Then i tried to send an offer and everything was smooth i got the confirmation alert instanty and it was to the right account. Honestly this is a big deal because scammers can change a bot accounts name cancel an offer with the real trader and redirect the trade to themselves and there is really no way of telling unless you open the account of the bot... This is stupid

Some things better not said

Anyway thats why you shuld always duble and tripple chack your trades before confiming with all avabile data (how long you been friends, Steam level and so on)

[Pazookipot]

Did you ever find out what was wrong? This happened to me, except during a really expensive trade with someone and now I'm on the verge of being banned by Steam Rep for it because unlike your situation, I was unlucky enough to accidentally accept the trade in my confusion. I'm personally suspicious of the person that originally wanted the hat, but I don't have any really strong proof.

[Pazookipot]

The reason I think this is because the account that got the hat only has one alias, and it was the name of the account of the original user that wanted the hat, the account did not change its username in order to mimic who I was trading, it seemed to be an account specifically made to become a duplicate of the original person and only started to become trading-active two days before.

[cSg|mc-Hotsauce]

引用自 Break the Bed：

Did you ever find out what was wrong? This happened to me, except during a really expensive trade with someone and now I'm on the verge of being banned by Steam Rep for it because unlike your situation, I was unlucky enough to accidentally accept the trade in my confusion. I'm personally suspicious of the person that originally wanted the hat, but I don't have any really strong proof.

引用自 Break the Bed：

The reason I think this is because the account that got the hat only has one alias, and it was the name of the account of the original user that wanted the hat, the account did not change its username in order to mimic who I was trading, it seemed to be an account specifically made to become a duplicate of the original person and only started to become trading-active two days before.

Scan for malware. https://www.malwarebytes.com/

Deauthorize all devices https://store.steampowered.com/twofactor/manage

Change your password on a secure device.

Generate new back up codes.

Revoke the api key https://steamcommunity.com/dev/apikey

[Winged One]

引用自 Break the Bed：

Did you ever find out what was wrong? This happened to me, except during a really expensive trade with someone and now I'm on the verge of being banned by Steam Rep for it because unlike your situation, I was unlucky enough to accidentally accept the trade in my confusion. I'm personally suspicious of the person that originally wanted the hat, but I don't have any really strong proof.

your account has been compromised, don't login to 3rd party sites

引用自 cSg|mc-Hotsauce：

引用自 Break the Bed：

Did you ever find out what was wrong? This happened to me, except during a really expensive trade with someone and now I'm on the verge of being banned by Steam Rep for it because unlike your situation, I was unlucky enough to accidentally accept the trade in my confusion. I'm personally suspicious of the person that originally wanted the hat, but I don't have any really strong proof.

引用自 Break the Bed：

The reason I think this is because the account that got the hat only has one alias, and it was the name of the account of the original user that wanted the hat, the account did not change its username in order to mimic who I was trading, it seemed to be an account specifically made to become a duplicate of the original person and only started to become trading-active two days before.

Scan for malware. https://www.malwarebytes.com/

Deauthorize all devices https://store.steampowered.com/twofactor/manage

Change your password on a secure device.

Generate new back up codes.

Revoke the api key https://steamcommunity.com/dev/apikey

:qr:

^^^

[The Giving One]

Yep, sounds like yet another API Key scam.

API Key Scam Explained

https://blog.opskins.com/protect-your-steam-account-from-the-steam-api-key-scam/

[Teksura]

Scan for malware https://www.malwarebytes.com/
Deauthorize all other devices https://store.steampowered.com/twofactor/manage
Change passwords from a clean computer
Generate new backup codes https://store.steampowered.com/twofactor/manage
Revoke the API key https://steamcommunity.com/dev/apikey
Stop using shady third party trade sites or clicking suspicious links.


Do each of the steps.



What happened is your account became compromised, most likely through a third party site like those shady sites you advertise in your name history. This well known scam then requires you to authorize the trade giving your items away after you allow them access to your account through either malware, or giving away your details through a phishing fake login page or other trick used by those shady third party sites. The way it does this is after it gains access to your account, a bot waits until you send out a trade offer, and then using the access you gave to them, their bot cancels the trade, changes a bot account to match the name and profile picture of the person you wanted to trade with, and then sends a trade giving your stuff away for free.

The scam depends on you ignoring all the warnings, such as "this user is not on your friends list", "this user has a similar name to someone on your friends list", their items missing from the offer, the big "you will receive nothing" text, the fact that they have the wrong level, and a few other obvious warnings. It only works if you're not even looking at what you're doing. Sadly, an awful lot of people don't care enough to verify the trade is what they are expecting, so this scam continues to work.

Valve will not return items you gifted away to the scammer as a result of ignoring all the warnings.

[Pazookipot]

I've already done a virus scan and it came back completely negative. The incident itself happened almost exactly a week ago. Would it be possible that after getting the hat, the person was able to delete their own existence off my PC, or is that not even possible? I'm a very cautious person and I never log into anything phishy (get it?? haha...I'll go die now). Also, thank you!! That was exactly what I was looking for. Is there any way to know exactly who or how someone got my API key?

[Pazookipot]

I'd also like to add that I did another trade on Wednesday and had absolutely no problems like that originally happened.

[Giant Duck]

引用自 Break the Bed：

Did you ever find out what was wrong? This happened to me, except during a really expensive trade with someone and now I'm on the verge of being banned by Steam Rep for it because unlike your situation, I was unlucky enough to accidentally accept the trade in my confusion. I'm personally suspicious of the person that originally wanted the hat, but I don't have any really strong proof.

Yea I went into my installed applications on windows and i found several suspicious malware programs, so i completley wiped my PC after backing up the important stuff and everything was normal again

[Giant Duck]

引用自 Break the Bed：

I've already done a virus scan and it came back completely negative. The incident itself happened almost exactly a week ago. Would it be possible that after getting the hat, the person was able to delete their own existence off my PC, or is that not even possible? I'm a very cautious person and I never log into anything phishy (get it?? haha...I'll go die now). Also, thank you!! That was exactly what I was looking for. Is there any way to know exactly who or how someone got my API key?

Man I have had another incident where i was invited to a csgo 1v1 and my game crashed then all of a sudden i got emails saying my steam email, password and phone numbers have been changed and that my authenicator was removed and I kid you not the cursor on my pc started moving and it went into chrome and opened my Gmail thats when i unplugged my PC. I know this is unreltaed but the extenct that people can have control over your PC is insane!

[Pazookipot]

Wait what the hell, really?? That's actually terrifying, though...glad you were able to recover. The reason I'm so freaked out about this happening to me is because I'm such a good noodle, I never click on anything anyone sends me unless I know them really well, I don't go on any external websites that use steam except for like Steam Rep and backpack.tf. Of course that's been harder and harder to do because I was trying to sell my Unusual.