My friend got hacked 10 minutes or more ago, everything changed, had mobile authenticator, email changed, password changed

[Zorutan]

Title says it all its very fresh hack, I am pacicking and don't know what to do, how do I help myf friend? (sorry for caps(was used edited for later))

[Cathulhu]

1. Turn off caps. That is considered rude.
2. Your friend must contact Support.
3. Your friend should stop entering his credentials and SMA codes on fake websites, otherwise it would have been impossible to compromise the account. It was not hacked.

[Zorutan]

The message the bot sent me is:

Removed it, it's just the basic scamming text.

DO NOT CLICK THE LINK IT IS SCAM, I copied it so this website could be taken down

[Cathulhu]

Then don't post the link. Why are you doing a stupid thing like that? Stop helping in accounts getting phised.

[Zorutan]

He never entered any creditals anywhere, sorry for the caps again. How can he contact steam support? So far we've gone through some fo these but all of them lead to needing the password, but everything was changed.

[Zorutan]

Done...

[Supafly]

Get your friend, not you, to go here
https://help.steampowered.com/en/wizard/HelpWithAccountStolen

[Zorutan]

Removed link, will not post link again, noted

[Cathulhu]

Publicado originalmente por Zorutan:

He never entered any creditals anywhere

Yes, he did. Because it happens all the time that people enter their credentials on a fake website. Your friend is just another one who didn't bother to check the URL if it's real.

[999999999]

Publicado originalmente por Zorutan:

He never entered any creditals anywhere, sorry for the caps again.

The stuff in post #2 says otherwise. The account would not send you that type of message if your "friend" did not use shady skin/case/betting sites.

[Zorutan]

We checked his browser history, and there is nothing, but I will check it for him incase he missed it. Can't say sorry enough for rude behaviour

[Supafly]

Publicado originalmente por Zorutan:

We checked his browser history, and there is nothing, but I will check it for him incase he missed it. Can't say sorry enough for rude behaviour

Incognito/private browsing = no history will be saved.
He could have cleared history manually.
Browser could be set to wipe history when exiting using 'Quit.' depending on Browser and settings.
Could also be your friend feels ashamed and won't admit it.

[Donna Pinciotti]

No point in checking browser history. He 100% entered him log in details somewhere that was not steam. This caused the account hijack

[Zorutan]

So I found a site in his browser history which I won't link, but it seems that there is where he typed his creditals, but that doesen't explain how they got through the mobile defense?

Publicado originalmente por Suicidal Monkey:

Get your friend, not you, to go here
https://help.steampowered.com/en/wizard/HelpWithAccountStolen

So he was there, and I helped him translate it and stuff, we did check the hungarian version too (which he understands) but for obvious reasons it needs the password, email, or mobile code. All of them got hacked, he already changed his emails password so they can't get it again (Hopefully)

[999999999]

Because the fake login screen also phished his mobile code.

[Zorutan]

I see


He knows the purchasing information things, but doesen't have a support account so there is no way to make a support ticket, or is there?