Tradeit Bot stolen most valuable items from my inventory

[Comrade.Yuri]

In december or so I was watching Arteezy's stream and there was an ad of Tradeit.gg trading platform (never heard of it before) - I've joined to peek in, but nothing happened, so I've closed and forgot about it.
Haven't been to account, nor played since then (more then 2 month), but today, 23rd of Feb - find out, that all of the valuable items (immortals for Dota and pletty much all for CS) had GONE. I've checked the trading history and found out that ALL my items gone thru Tradeit bots...
6.02
TRADEIT.GG - BOT #27 - took all my CS stuff
TRADEIT.GG - BOT #9 - some unknown trade (for the items I never had)
TRADEIT.GG - BOT #11 - again operation with the item I've never had
ilyasitw1ex - Took all of these items:
Yasha the Quickblade, Насмешка: Get Burned, Насмешка: Sharp Blade, Насмешка: Shake Your Money Maker, Kraken Shell, Cursed Talon of the Scarlet Raven - Off-Hand, Frozen Belt of the Eternal Light, Frozen Infernal Pactblade, Corrupted Abyssal Hellclaw, Frozen Atramentos the Apocalyptic, Frozen Atramentos the Apocalyptic, Frozen Iceshard, Evergreen Stalker, Frozen Ocula the Observer, Frozen Iceshard, Frozen Мега-убийства: Trine, Frozen Redwood Claws, Baby Roshan, Frozen Infernal Pactblade, Cursed Araceae's Tribute Spear, Cursed Throe, Cursed Tarnhelm of Ruin, Genuine Mountain Splitter, Jade Talon, Dragon Horse Spirit Totem, Auspicious Battlefury, Unusual Непреклонный Грявол, Auspicious Rampant the Scaled Hunter, Genuine Ярлык для описания, Genuine Именной ярлык, Auspicious Spring Ward, Inscribed Banners of Battle Fortune, ''Mad Eye Of Tryhard'', Inscribed Rampant Outrage, Inscribed Fluttering Mortis, Genuine Weather Snow, Genuine Weather Rain, Genuine Weather Moonbeam, Inscribed The Lightning Orchid, Inscribed Mecha Boots of Travel Mk III, Inscribed Yulsaria's Glacier, Pudgling, Genuine Krakenbringer, Fishy Frillhawk, Scythe of Pestilence, Blade of the New Year, Inscribed Splattering Forcipule, Inscribed Fin King's Charm, Helm of Impasse, Genuine Square Sky Staff, Genuine Style of Prophecy, Genuine Guard of Basilius, Genuine Soulhoof, Genuine Shade of the Ranger, Genuine Mischievous Fruits, Genuine Vanguard Fireblade, Genuine Wing of the Astrorock, Genuine Scythe of Plague, Genuine Wide Angle , Genuine Breath of Death, Genuine Sven's Revenge, Merry Wanderer's Brush, Telebolt Projektor, Spirit of Calm, Mercurial's Call, Набор курсоров: The International 2015, Inscribed Iron Surge, The Watcher Below, Насмешка: Do the Robot!, Насмешка: Do a Barrel Roll!, Inscribed Resistive Pinfold, Насмешка: Heavenly Jump!, Насмешка: Selemene Leap!, Inscribed The Barren Crown, Inscribed Span of Black Nihility, Inscribed Rollermawster, Насмешка: Fiendish Swag!, Насмешка: Quick Draw!, Genuine Wyvern Hatchling, Call of the Dendrochron, Almond the Frondillo, Насмешка: Backstroke!, Насмешка: Mag Power!, Inscribed Draining Wight, Inscribed Moonfall, Inscribed Magus Apex, Насмешка: Chicken!, Genuine Weather Pestilence, Genuine Weather Sirocco, Genuine Weather Harvest, Eye of the Lost Star, Grip of the Lost Star, Mantle of the Cinder Baron, Aged Spirit of Tide, Tail of the Ferocious Toxicant, Inscribed Jewel of Aeons, Genuine Fluttering Staff, Inscribed Draining Wight, Inscribed Shock of the Anvil, Inscribed Bonkers the Mad, Inscribed Colossal Crystal Chorus, Bracers of the Cavern Luminar, Controlled Burn, Pale Augur, Shadow Masquerade, Crimson Pique, Slumbering Terror, Adoring Wingfall, Shearing Deposition, Wrap of the Urushin Huntsman, Silent Ripper, Auspice of the Whyrlegyge, Phantom Concord, Daughters of Hydrophiinae, Pauldrons of the Battleranger, Bow of the Battleranger, Насмешка: RazorFlip!, Насмешка: To Hell and Back!, Infused Wings of the Manticore, Inscribed Tormented Staff, Crown of Tears, Nothlic Burden, Crest of Omen's Embrace, Mark of the First Hunt, Peregrine Flight, Fortunes's Tout, Hood of Lucid Torment, Inscribed Paraflare Cannon, Virga's Arc, Wings of the Elder Myth, Severing Lash, Sange the Backseeker, Inscribed Muh Keen Gun, Hydrakan Latch, Humble Drifter Hat, Pyrexaec Floe, Full-Bore Bonanza, Bellows of Creation, Profane Union, Iceflight Edifice, Yulsaria's Mantle, The Barren Vector, Baneful Devotion, Crimson Cyrridae, Cult of Aktok, Blastforge Exhaler, Stuntwood Sanctuary, Chaos Fulcrum, Stuntwood Sanctuary, Profane Union, Gimlek Decanter, Bellows of Creation, Transversant Soul, Staff of Gun-Yu, Maw of Eztzhok, Wyrmwrought Flare, Malefic Drake's Hood, Scavenging Guttleslug, Maraxiform's Ire, Baneful Devotion, Glaive of Oscilla, Golden Edict of Shadows, Edge of the Lost Order, Golden Bracers of Forlorn Precipice, Glare of the Tyrant, Span of Sorrow, Tempest Revelation, The Order of Cyprin, Censer of Gliss, Malefic Drake's Strike, Pyrexaec Flux, Mournful Reverie, Paragon's Rebuke, Bloodfeather Feast, Savage Mettle, Hearts of Misrule, Emerald Conquest, Zeal of Omoz Arkosh, Shatterblast Core, Edict of Shadows, Savage Mettle, Edict of Shadows, Shatterblast Core, Paragon's Rebuke, Ghastly Nocturne, Ghastly Nocturne, The Order of Cyprin, Mournful Reverie, Bracers of Forlorn Precipice, Monarch of the Sapphire Glen, Hearts of Misrule, Emerald Conquest, Savage Mettle, Zeal of Omoz Arkosh, Censer of Gliss, Mournful Reverie, Pachyderm Powderwagon Squee, Golden Bracers of Forlorn Precipice, Savage Mettle, Bloodfeather Feast, Mulctant Pall, Exalted Flockheart's Gamble, Exalted Flockheart's Gamble, Cursed Storm-Stealer's Whip, Cursed Fire of the Exiled Ronin, Basher of Mage Skulls

18.02
TRADEIT.GG - BOT #18 - took these items:
-Circlet of the Purist Champion, Death Mask of the Brave, Braided Tail of the Conquering Tyrant, Chronite Bracers, Helm of Infernal Despair, Genuine Valor, Bracers of the Hierophant, Cursed Pike of the Blood Stained Sands, Комментатор: Defense Grid, Shoulders of the Twelfth Day, Frozen Storm-Stealer's Helm, Frozen Cloud Forged Great Wings, Frozen Curls of Flame, Frozen Waraxe of Lost Light, Frozen Black Reaver, Frozen Waraxe of Lost Light, Frozen Visage of Eki Bukaw, Frozen Steelweb Sheaths, Genuine Spike of Frostbite, Auspicious Teeth of the Eternal Light, Auspicious Lyralei's Breeze, Equine Battlehelm, Auspicious Leggings of the Awakened, Burden of the Exiled Ronin, Genuine Triumph, Hat of The Howling Wolf, Claddish Guard, Комментатор: Axe, Комментатор: Капитан пиратов, Genuine Lieutenant Squawkins, Beard of the Heretic, Battle Glory Kill Banner, Horns of Noblesse, Fortune's Coin, Form of the Great Calamity, Fan of Piercing Silence, Dark General's Mantle, Talons of Black Nihility, Crown of Black Nihility, Насмешка: Hang Loose!, Bracers of the Lost Star , Hammer of the Mechanised Pilgrim, Spines of the Ferocious Toxicant, Blade of the Rekindled Ashes, Guard of the Rekindled Ashes, Bracers of the Ferocious Heart, Girdle of the Ferocious Heart, Crown of Malice, Armor of Malice, Staff of the Lumini Polare, Inscribed Bessy the Batmeleon, Helm of the Enthaleen Dragon, Inscribed Clarity Blade of the Deep, Emeraldine Guardian, Armor of the Proven, Barding of the Proven, Leashed Rockshark, Adornment of Omen's Embrace, Katar of Omen's Embrace, Form of the Dark Wood, Sleeves of Lucid Torment, Cloth of Lucid Torment, Eyes of Lucid Torment, Bracers of the Manticore, Helm of the Manticore, Armor of the Manticore, Belt of the Manticore, Carapace of the Drowning Trench, Grip of the Drowning Trench, Headshell of the Drowning Trench, Belt of the Drowning Trench, Leashed Rockshark, Aquemerald Blade, Staff of the Manticore, Blade of the Wandering Flame, Form of the Great Grey, Diadem of the Elder Myth, Humble Drifter Garb, Hat of the Jiang Shi's Revenge, Gloried Horn of Druud, Насмешка: Fluid Mechanics, Hook of the Scoundrel, Large Elemental Ice, Bracers of Forlorn Precipice, Bracers of Forlorn Precipice, Bracers of Forlorn Precipice, Pike of the Sunken Gaoler, Plates of the Sunken Gaoler, CZ75-Auto | Штамп, Phantom Lancer, Razor, Bounty Hunter, Tusk, Tiny, SWAT, Balkan, FBI, Jockey, Hunter, Witch
+Hellborn Grasp
FOXIK - took these items:
Swamp Fins, Shoulders of the Arsenal Magus, The International 2014: комплект музыки, Slicer of the Depths, Strap of Black Nihility, Sweep of Black Nihility, Spines of the Lost Star, Mace of the Fissured Soul, Seismic Berserker Armor, Seismic Berserker Bracers, Skull of the Razorwyrm, Skirt of Omen's Embrace, Visage of the Gruesome Embrace, Medium Elemental Ice, Tiny Elemental Ice, Hellborn Grasp

IDK how much all of that can cost, but those items I was collecting since 2014 and it's just sad that in 2K20 no one is secure. You always feel like crap when got screwed like that. Haven't got any support from Steam just yet, but more then sure - they'll throw me away like they always do.
In any cases - wanna wish those scumbags who had stolen my items to die of cancer and steam, who have this vulnerabilities, well - you're bad!

[cSg|mc-Hotsauce]

So, you gave away all your account info to a phishing login page...?

Steam Item Restoration Policy

[Comrade.Yuri]

no. regular signIN procedure
btw - platform still working and it was worked before me

[cSg|mc-Hotsauce]

引用自 Comrade.Yuri：

no. regular signIN procedure

Explain in detail.

[Brujeira]

引用自 Comrade.Yuri：

no. regular signIN procedure
btw - platform still working and it was worked before me

That was actually a phishing login page. They’re designed to look authentic to fool as many people as possible.

[Comrade.Yuri]

probably so, but the trading bots are theirs. API key was generated also for my account (which never was there). I never used any trading or betting platforms since like 2015.

[cSg|mc-Hotsauce]

引用自 Comrade.Yuri：

probably so, but the trading bots are theirs. API key was generated also for my account (which never was there). I never used any trading or betting platforms since like 2015.

Your account is compromised.

Scan for malware. https://www.malwarebytes.com/

Deauthorize all devices https://store.steampowered.com/twofactor/manage

Change your password on a secure device.

Generate new back up codes. https://store.steampowered.com/twofactor/manage

Revoke the api key https://steamcommunity.com/dev/apikey

[Comrade.Yuri]

引用自 cSg|mc-Hotsauce：

引用自 Comrade.Yuri：

probably so, but the trading bots are theirs. API key was generated also for my account (which never was there). I never used any trading or betting platforms since like 2015.

Your account is compromised.

Scan for malware. https://www.malwarebytes.com/

Deauthorize all devices https://store.steampowered.com/twofactor/manage

Change your password on a secure device.

Generate new back up codes. https://store.steampowered.com/twofactor/manage

Revoke the api key https://steamcommunity.com/dev/apikey

:qr:

done all of that, but thx for sharing

[Brian9824]

引用自 Comrade.Yuri：

steam, who have this vulnerabilities, well - you're bad!

Steam doesnt have any vulnerabilities. Unfortunately steam cant prevent users from giving away all their information.

[Zekiran]

You gave out your information.

Stop using bots and off-steam sites to do anything.

[Aliquis Freedom & Ethnopluralism]

As for trade API key and that what people are saying is that you where tricked to use a page which seemed to be the real one when logging into Steam community which gave them your details and made it possible for them to set it up.

Someone else have mentioned what I think was a style sheet / whole page which looked like a popup window from the browser so then it could show the steamcommunity part even though it wasn't. The more safe way to do this would be to launch a new window unless they can capture that too and then visit the real steamcommunity page to log in there first and then return to whatever other page and login through Steam then where you are already logged in.

Also the steam enhanced / augmented steam and steamdb extension and GOG community plugin may be things to avoid just to be sure too.

[↑↑↓↓←→←→BASelect]

That should teach you a lesson to never click ads.

[Muppet among Puppets]

What do you need to do to trade?
Email or auth app agree?

Or did you have no item protection?