Messages automatically sent to majority of my friends

[Hamza Waseem]

I clicked on a link from a steam group post and it asked to sign in using steam, where I was already signed in, in my chrome browser, but it asked to put username & password and steam mobile guard authenticator code and i thought there is something fishy, so I logged out of all my devices.
Now when I launched steam i got response from many friends as 23 unread messages.
The message which was automatically sent is "Hey i need one more refferal to get a knife , can you please use code "zTc5t" on site **Link removed**, i will give you a share of 10 keys , thanks"

Need help to prevent my account from getting any kind of ban!!!:csgo_explosion:

[cSg|mc-Hotsauce]

Your account was compromised.

Scan for malware. https://www.malwarebytes.com/

Deauthorize all devices https://store.steampowered.com/twofactor/manage

Change your password on a secure device.

Generate new back up codes.

Revoke the api key https://steamcommunity.com/dev/apikey

NEVER post the scam sites on the forums.

[Hamza Waseem]

Originally posted by cSg|mc-Hotsauce:

Your account was compromised.

Scan for malware. https://www.malwarebytes.com/

Deauthorize all devices https://store.steampowered.com/twofactor/manage

Change your password on a secure device.

Generate new back up codes.

Revoke the api key https://steamcommunity.com/dev/apikey

NEVER post the scam sites on the forums.

:qr:

Also, what does revoke API do?

[Hamza Waseem]

Also the messages sent time is 10:30 pm PST, I had already logged out, revoked access to all devices before like at 6:47 pm PST. but the messages sent time is 10:30

[cSg|mc-Hotsauce]

Originally posted by Hamza Waseem:

Also the messages sent time is 10:30 pm PST, I had already logged out, revoked access to all devices before like at 6:47 pm PST. but the messages sent time is 10:30

Revoking was not enough.

ALL steps, in order.

[Hamza Waseem]

A steam friend asked me on facebook and send me this screenshot that shows my name changed.

Image:
https://drive.google.com/file/d/1jKRedssELDTDW2oJZ8nPY4n0OB0tm7KU/view?usp=sharing

[cSg|mc-Hotsauce]

Not relevant to the issue.

[Hamza Waseem]

Isn't it relevant?, as my same account picture, message was also sent to him, also had recieved his reply, and with same picture but different name

[Hamza Waseem]

How to "Generate new back up codes."?????
I cannot find the link