SCAM Warning!

[Action Jesus]

Nearly got scammed, what happens:

• Steam-ID changed to numbers
  
  
• Profile description changed to following:
  "This account has been flagged by Steam Support for violations of the Terms of Service
  Agreement.Trading on the following account will be permanently disabled in 1 hour. We have
  allowed you this time to send your valuables skins to a friend or storage account."
  
  
• people message you about the scam, telling you it is urgent to give your items to friends.
  
  
• Trade offers to friends are being redirected to exact copies of those. ( low steam lvl)

Really want to know how outsiders can do all this to my account.

[Theblaze]

Stop logging in into phishing sites?.

[SkullBag]

Also don’t login to public computers or gaming cafes

[Jerry]

Caution: Your account has been hijacked. All attempted trades will be forwarded to a different profile belonging to the hijacker. Do not trade away any items.

Check your computer for malware, change password and email adress, deauthorise all other devices and revoke your API key.

[Mikasa Ackerman]

Originally posted by MRVL:

permanently disabled in 1 hour. We have
....allowed you this time to send your valuables skins to a friend or storage account."

Really want to know how outsiders can do all this to my account.

the whole point of items being locked to an account if the account gets a vac ban is to make it hurt , steam would never warn you about a ban happening soon , especially not to save any items you have , if steam would do that they wouldnt lock items to banned accounts to begin with

such a scam really is easy to recognize

[Action Jesus]

I logged into dota2tourney, must be some phishing site.
But its not the answer for how that can happen.

[Phantom]

If this has happened to you, then the hijacker may have remote access to your account.

[ 1 ] Scan for malware: https://www.malwarebytes.com/

[ 2 ] Deauthorize all devices: https://store.steampowered.com/twofactor/manage

[ 3 ] Change your password on a secure device.

[ 4 ] Generate new back up codes.

[ 5 ] Revoke any active Web API key: https://steamcommunity.com/dev/apikey

Do not use third-party sites or open links that lead to suspicious pages.

https://support.steampowered.com/kb_article.php?ref=1266-OAFV-8478

[Phantom]

Originally posted by MRVL:

I logged into dota2tourney, must be some phishing site.
But its not the answer for how that can happen.

YES IT IS the answer.

The hijacker gains access and then changes the profile summary and other details.

[Action Jesus]

Originally posted by Sakura Haruno:

Originally posted by MRVL:

permanently disabled in 1 hour. We have
....allowed you this time to send your valuables skins to a friend or storage account."

Really want to know how outsiders can do all this to my account.

the whole point of items being locked to an account if the account gets a vac ban is to make it hurt , steam would never warn you about a ban happening soon , especially not to save any items you have , if steam would do that they wouldnt lock items to banned accounts to begin with

such a scam really is easy to recognize

would not say really easy to recognize when you are in the middle of something and that issue comes up.
you will still ask yourself first what exactly is happening. thats what this warning is for.

[Action Jesus]

Originally posted by Robin3sk:

Originally posted by MRVL:

I logged into dota2tourney, must be some phishing site.
But its not the answer for how that can happen.

YES IT IS the answer.

The hijacker gains access and then changes the profile summary and other details.

:cfacepalm:

that website was marked as secure https and i googled it, no bad review at all.
I was asking for technical answers , how those changes work in detail.

[Phantom]

Originally posted by MRVL:

Originally posted by Sakura Haruno:

the whole point of items being locked to an account if the account gets a vac ban is to make it hurt , steam would never warn you about a ban happening soon , especially not to save any items you have , if steam would do that they wouldnt lock items to banned accounts to begin with

such a scam really is easy to recognize

would not say really easy to recognize when you are in the middle of something and that issue comes up.
you will still ask yourself first what exactly is happening. thats what this warning is for.

It is easy to recognize unless you're extremely gullible or unknowlegable - which is may be your case.

Bans are NEVER issued in conjunction with changing your profile details.

It's utterly vacuous to assume that it does.

[Phantom]

Originally posted by MRVL:

Originally posted by Robin3sk:

YES IT IS the answer.

The hijacker gains access and then changes the profile summary and other details.

that website was marked as secure https and i googled it, no bad review at all.

That does not mean a single crap.

All that is required is a fake login screen where you input your credentials.

[Jerry]

Originally posted by MRVL:

would not say really easy to recognize when you are in the middle of something and that issue comes up.
you will still ask yourself first what exactly is happening. thats what this warning is for.

That's pretty much the point of it, building up panic and artificial pressure to drive affected users into the final step of the scam of giving away their items.
There are many possible ways, you can get into this, some of them having been named around here already. Third party websites with malicious intent, copycats of Steam and legitimate websites, public terminals...
If you want to be somewhat safe, only log into Steam on the official Steam website. Every site that requires a login will carry this one over. If it does not, but still asks for your data, it's a fake.

[Action Jesus]

yes jerry, that's how they work.

Thanks everyone for your helpful messages.

[Mikasa Ackerman]

Originally posted by MRVL:

Originally posted by Sakura Haruno:

the whole point of items being locked to an account if the account gets a vac ban is to make it hurt , steam would never warn you about a ban happening soon , especially not to save any items you have , if steam would do that they wouldnt lock items to banned accounts to begin with

such a scam really is easy to recognize

would not say really easy to recognize when you are in the middle of something and that issue comes up.
you will still ask yourself first what exactly is happening. thats what this warning is for.

a ban message wont have to be in an info box , same with fake admins that contact users , when steam tells me about an action being taken after i report something , they dont need to have a mod write it on my comments , i get a special notification (same if you get banned or warned in a forum )

a mod wouldnt need to go and tell me "you will get banned if you dont give me money now" through chat because they have other ways of telling me something

generally , if you can revert all the things , its not a ban message , just like someone having a "verified trading admin" username or stuff , if you can just copy it and have it as a username yourself its fake ( afaik valve names are not allowed for example )

[CJ HUNTER]

Originally posted by MRVL:

Really want to know how outsiders can do all this to my account.

The answer is in your name history, and I don't mean the one with the numbers.