I just got hacked. I have a question

[0x696c79]

One hacker added me to hack. He wanted to change some loading screens for skins. I clicked the link on his profile in his description and it redirected me to a steam-like website. Of course I thought something's not right. I wanted to log in from another, normal link, but deliberately logged in through his one entering my Steam Guard code. I managed to change my password twice and my Steam Guard device (from tablet to phone by deleting and adding it again). Also I logged out all devices which were logged in my account with Steam Guard. Am I safe now?

[Phantom]

We always recommend a few other mandatory steps.

1) Scan for malware. https://www.malwarebytes.com/

2) Deauthorize all devices... https://store.steampowered.com/twofactor/manage

3) Change your password on a secure device.

4) Generate new back up codes.

5) Revoke the api key https://steamcommunity.com/dev/apikey

[0x696c79]

Originally posted by Robin3sk:

We always recommend a few other mandatory steps.

1) Scan for malware. https://www.malwarebytes.com/

2) Deauthorize all devices... https://store.steampowered.com/twofactor/manage

3) Change your password on a secure device.

4) Generate new back up codes.

5) Revoke the api key https://steamcommunity.com/dev/apikey

:yinyangflip:

5) Clause. Please explain me this

[Cathulhu]

If you don't know what the API key is for, you don't need one. Just revoke it so the bot can't abuse it.

[0x696c79]

Originally posted by Cathulhu:

If you don't know what the API key is for, you don't need one. Just revoke it so the bot can't abuse it.

Will this affect some of my actions on Steam? Btw, thank you for answering, there's no way hacker can get into my account now

[Cathulhu]

No, it will not.
Again, if you don't know what the Steam web API key is for, you don't need one and won't miss one, ever.

[0x696c79]

Originally posted by Cathulhu:

No, it will not.
Again, if you don't know what the Steam web API key is for, you don't need one and won't miss one, ever.

Ok, thanks. I revoked it. Am I safe now? I am so worried

[Dr.Shadowds 🐉]

Originally posted by アンドリュー Jäger:

Originally posted by Cathulhu:

No, it will not.
Again, if you don't know what the Steam web API key is for, you don't need one and won't miss one, ever.

Ok, thanks. I revoked it. Am I safe now? I am so worried

As long you did all 5 steps from post one you be fine.

[0x696c79]

Originally posted by Dr.Shadowds 🐉:

Originally posted by アンドリュー Jäger:

Ok, thanks. I revoked it. Am I safe now? I am so worried

As long you did all 5 steps from post one you be fine.

So, If I checked by Anti-Malware after I changed my password... Am I still safe?

[Cathulhu]

As long as you did ALL FIVE STEPS, yes.

Originally posted by Robin3sk:

We always recommend a few other mandatory steps.

1) Scan for malware. https://www.malwarebytes.com/

2) Deauthorize all devices... https://store.steampowered.com/twofactor/manage

3) Change your password on a secure device.

4) Generate new back up codes.

5) Revoke the api key https://steamcommunity.com/dev/apikey

:yinyangflip:

[0x696c79]

Originally posted by Cathulhu:

As long as you did ALL FIVE STEPS, yes.

Originally posted by Robin3sk:

We always recommend a few other mandatory steps.

1) Scan for malware. https://www.malwarebytes.com/

2) Deauthorize all devices... https://store.steampowered.com/twofactor/manage

3) Change your password on a secure device.

4) Generate new back up codes.

5) Revoke the api key https://steamcommunity.com/dev/apikey

:yinyangflip:

Ok, so the order doesn't mean, got it

[Dr.Shadowds 🐉]

1. Did you scan for malware? https://www.malwarebytes.com/

2. Did you deauthorize all devices? https://store.steampowered.com/twofactor/manage

3. Did you change your password, on a secure device?

4. Did you generate new back up codes?

5. Did you Revoke the api key? https://steamcommunity.com/dev/apikey

Now read the 1st post after answering these 5 questions in your mind, and realize what we just explain to you 4 times already.

[0x696c79]

Originally posted by Dr.Shadowds 🐉:

1. Did you scan for malware? https://www.malwarebytes.com/

2. Did you deauthorize all devices? https://store.steampowered.com/twofactor/manage

3. Did you change your password, on a secure device?

4. Did you generate new back up codes?

5. Did you Revoke the api key? https://steamcommunity.com/dev/apikey

Now read the 1st post after answering these 5 questions in your mind, and realize what we just explain to you 4 times already.

I am asking whether hacker can get my information if I do it in another order. Why can't you answer?

[Dr.Shadowds 🐉]

Originally posted by アンドリュー Jäger:

I am asking whether hacker can get my information if I do it in another order. Why can't you answer?

You kept on saying are you safe, are you safe. The answer is no if you didn't do all of the 5 things that were listed, this is the 5th time being explained.

Yes the hijacker will still get your information if you choose not to do all of the 5 things that were listed. If you have a backdoor on your system, such as malware then you're basically still vulnerable because you didn't do the 1st step. The hijacker will still have access to the account if you didn't do the 2nd step, and 3rd step, the 4th step is to ensure to make sure hijacker doesn't has a chance, the 5th is to remove whatever the hijacker trying to do on your account if the hijacker apply any API key on your account. That was step 1 to 5 explain in full details, choose not to do the steps, and the answer is yes the hijacker will get your account again, but if you choose to do all 5 steps, and you fight agasint the hijacker from trying to take the account back from you.

[Euphytose]

Originally posted by アンドリュー Jäger:

I wanted to log in from another, normal link, but deliberately logged in through his one entering my Steam Guard code.

Either you don't know what deliberately means, or you're an idiot.

But then again you'd be an idiot for not knowing what deliberately means.