Account continues to be broken into.

[Tylenol PM]

I’m infinitely confused as to how this is happening. My password is literally 20+ characters with multiple symbols, letters, caps and lower plus numbers. I did this because some ♥♥♥♥♥♥♥♥ from Malaysia tried getting into my account and my 10 character password apparently wasn’t good enough.

But I’ve made it nearly 3 times as long and random, and now some ♥♥♥♥♥♥♥♥ from Russia has brute forced his way into my account. What. The. ♥♥♥♥.

I can only hope steam 2-factor kept them out completely, but who really knows. Most 2-factor is a joke because it’s just a 6 digit code that needs to be guessed..... and apparently, they’re guessing a near infinite possibly combination password with ease!!!

Anyone else having this issue? Is steam just allowing people to run billions of password attempts on accounts without locking them out? This is absolutely insane. Nothing is safe.

[Spawn of Totoro]

You either have malware/virus, are falling for a phishing site, connecting to an unsecure/malicious connection or are using a 3rd party site (ie: Skin trading/gambling, unauthorized key reseller, ect.)

Passwords are not brute forced as there is security to prevent it, such as a cooldown after so many failed attempts.

[The Jagji]

Yeah, gona have to agree. Get your self some top notich anti viruse gear.

[Tylenol PM]

I reset my password from a very secure server at my job, created a new e-mail address attacked to my account, and made the password even longer and more obnoxious. I haven't even logged into Steam in months because this entire issue has me really steamed... Just got an email last night that my account was trying to be accessed again. Just fantastic :(

[cSg|mc-Hotsauce]

Originally posted by weirdtimmy:

I reset my password from a very secure server at my job, created a new e-mail address attacked to my account, and made the password even longer and more obnoxious. I haven't even logged into Steam in months because this entire issue has me really steamed... Just got an email last night that my account was trying to be accessed again. Just fantastic :(

Are you 100% positive the account name in the email is the one you use to log into Steam with?

[Tylenol PM]

Yes. I just reformatted both of my hard drives this morning, changing password on all accounts and emails a final time before I ultimately give up.

I am curious though what a hacker would even want with my steam account. It's not like they can get my payment info as I've deleted it all because of this BS.

[Jerry]

Something is compromised, if your story happens to be correct. A database breach would look different and, in addition, would not lead to a single user being gone after persistently after multiple password changes.

Could it be your phone?

[Zefar]

Originally posted by weirdtimmy:

I reset my password from a very secure server at my job, created a new e-mail address attacked to my account, and made the password even longer and more obnoxious. I haven't even logged into Steam in months because this entire issue has me really steamed... Just got an email last night that my account was trying to be accessed again. Just fantastic :(

Did the person get into the account or not?

Because if he tried and failed that's all he can do.
The reason the person tried again is because he knows your account name which can't be changed but he has no idea about your password if you changed it on another computer.

[Muppet among Puppets]

What do the emails speak about? Are they for the new email address of your account AND have the right login name?