I Got Hacked By One Russian In Moscow, I NEED HELP BADLY

[FANTOMA]

(guys this is the account that got hacked)

Yesterday 6:32PM - when i wanted to go back onto my gaming laptop to play CSGO but it gave me a sign in, so i did that and said my pass- was incorrect. i re-typed it and its the same thing.
I've got a real good feeling someone hacked my account and doesnt allow me play. (i was right)

Today (after school) - i went back onto my laptop and try to fix this. while doing so i was searching across my Gmail and i saw "recent change" by steam support, after i saw that i said to myself "i was really correct". and you know WHAT THIS HACKER DID??

*CHANGED EMAIL ATTACHED TO THIS ACCOUNT*

*CHANGED PASS- ATTACHED TO THIS ACCOUNT*

i was f***ing crying after seeing (not really just completely worried), but this hacker placed my email back to place so thats a good sign but.. whats the pass-? well this is the pass- he requested from steam support ---> XPX8EYD5@EXK (its from my email)

sadly no email found from the hacker.. :( but waiiiitt a second.. I GOT HIS IP ADDRESS (maybe he faked it, who knows, try to help me with that). here it is :3 -----> 46.8.10.71 (RU)

while trying to locate by his IP Address, i went to couple websites and show the exact same location and info but i will let you guys view this by my folder made (rage warning lol) ------

https://drive.google.com/drive/folders/1ppUzafzhE6lJF4olJ00t5GB6tmxbl3EQ?usp=sharing

things i did:
1. changed password for a 20 length password by Norton Security and saved it on my desktop

2. changed Gmail password

3. checked my phone, some reason the security (steam guard) is off and i turned it back on

4. confirm everything is me from my gmail except the stupid request he did


i will reply if there are any questions being asked here but i do need more info for this steam hack. but i have a question lol: "why are they doing this and what are they doing with my account?" (im from Latvia so i might not spell that well but i learned English more then Latvian)

(note: can anyone recommend for any other security needs for this? if so please let me know)

[J4MESOX4D]

Stop logging into dodgy 3rd party phishing sites including the one you are advertising in your name. Also did you deauthorize all other devices before you started changing credentials?

[FANTOMA]

Originally posted by J4MESOX4D:

Stop logging into dodgy 3rd party phishing sites including the one you are advertising in your name. Also did you deauthorize all other devices before you started changing credentials?

yes i have done that, deauth- my other unused devices also i dont go into these websites

[B-o-B]

Always stay alert, Always.

Account Security Recommendations
https://support.steampowered.com/kb_article.php?ref=1266-OAFV-8478

Never hurts to have.
https://help.steampowered.com/en/accountdata/SteamLoginHistory
https://help.steampowered.com/en/accountdata/MachineAuthName

[FANTOMA]

Originally posted by b☣bz:

Always stay alert, Always.

Account Security Recommendations
https://support.steampowered.com/kb_article.php?ref=1266-OAFV-8478

Never hurts to have.
https://help.steampowered.com/en/accountdata/SteamLoginHistory
https://help.steampowered.com/en/accountdata/MachineAuthName

DUDE, THIS STARTED IN (IE) Cavan then to Donegal (IE) - (NL) Noord Holland - (RU) Moscow + Sankt-Peterburg + Arkhangel'skaya oblast'.

Login and Logoff was only 1 min for each hack

but they really stole my account information and sold it off to maybe RU or to many other countries too

[cSg|mc-Hotsauce]

Originally posted by ✰✪ima star✪✰ | Pvpro.com:

DUDE, THIS STARTED IN (IE) Cavan then to Donegal (IE) - (NL) Noord Holland - (RU) Moscow + Sankt-Peterburg + Arkhangel'skaya oblast'.

Login and Logoff was only 1 min for each hack

but they really stole my account information and sold it off to maybe RU or to many other countries too

It doesn't matter where they're from.

Even the site in your name has been known to have fake phishing login pages.

[cSg|mc-Hotsauce]

Stop posting scam sites on the forums.

REMOVE THE LINKS!

[FANTOMA]

Originally posted by cSg|mc-Hotsauce:

Stop posting scam sites on the forums.

REMOVE THE LINKS!

:qr:

not doing anything, im just showing whats happening now ;(

and im having a huge issue today, f**k me

[cSg|mc-Hotsauce]

Originally posted by ✰✪ima star✪✰ | Pvpro.com:

Originally posted by cSg|mc-Hotsauce:

Stop posting scam sites on the forums.

REMOVE THE LINKS!

not doing anything, im just showing whats happening now ;(

Those links were harmful and if a user clicked on them, things would only get worse and spread around.

[FANTOMA]

Originally posted by cSg|mc-Hotsauce:

Originally posted by ✰✪ima star✪✰ | Pvpro.com:

not doing anything, im just showing whats happening now ;(

Those links were harmful and if a user clicked on them, things would only get worse and spread around.

:qr:

kk, i just removed that a min ago

[cSg|mc-Hotsauce]

All steps...

Scan for malware. https://www.malwarebytes.com/

Deauthorize all devices https://store.steampowered.com/twofactor/manage

Change your password on a secure device.

Generate new back up codes. https://store.steampowered.com/twofactor/manage

Revoke the api key https://steamcommunity.com/dev/apikey

[FANTOMA]

Originally posted by cSg|mc-Hotsauce:

All steps...

Scan for malware. https://www.malwarebytes.com/

Deauthorize all devices https://store.steampowered.com/twofactor/manage

Change your password on a secure device.

Generate new back up codes. https://store.steampowered.com/twofactor/manage

Revoke the api key https://steamcommunity.com/dev/apikey

:qr:

alright, thx

but i will not buy fr 1 - 2 months and keep looking at the login to make sure it really works

[cSg|mc-Hotsauce]

Just don't save your payment info and purchase wallet cards instead.

[FANTOMA]

Originally posted by cSg|mc-Hotsauce:

Just don't save your payment info and purchase wallet cards instead.

:qr:

damn, thx.

i will remove 'em now

[FANTOMA]

Originally posted by cSg|mc-Hotsauce:

Just don't save your payment info and purchase wallet cards instead.

:qr:

they already removed it, im more worried now.

[FANTOMA]

Originally posted by cSg|mc-Hotsauce:

All steps...

Scan for malware. https://www.malwarebytes.com/

Deauthorize all devices https://store.steampowered.com/twofactor/manage

Change your password on a secure device.

Generate new back up codes. https://store.steampowered.com/twofactor/manage

Revoke the api key https://steamcommunity.com/dev/apikey

:qr:

i have done everything,

Malwarebytes have detected 186 Malware Files and its now gone. (all located at my {USER} files)

all of my devices are deauthorize already (cuz the hackers disabled my steam guard)

i generated all x30 1-time use backup codes

and i didnt have a api key but now i have it



1 question: what does the API Key do? and whats the code used for? please, i love this account man.