Someone tried to log into my account?

[Feared-HUN]

I got an email from steam, that someone from a russian ip address tried to log into my account, and both the user name and password were correct.
Luckily I have steam guard, so of course they didn't know the verification code from my phone. I immediately changed both the email and steam passwords, but how's this possible? I never gave away my steam password, and it's a password I only used for steam.

[Si-Fi]

You may have to consider the fact you may have clicked on a phishing or malware link which is a logical reason for your account breach. There would not be any other way that it could have happened.

[Supafly]

Check for viruses particularly for a Keylogger variant. Malwarebytes has a good free version.

[Cathulhu]

Or you somehow infected your PC with malware.

[Feared-HUN]

I scanned firstly with Spybot, it found 42 files. I'm double checking it, then nod 32 for viruses.

[Feared-HUN]

Today I got another email that some russian IP tried to log into my account, but the strange thing is that the email said 'Dear f*********', but my account name is 't********' and when I changed my password the steam notification mail said 'Dear t*******' etc. It's weird...

[Falro the Great]

I've seen a few cases like this, and I'm convinced it's either some kind of wierd phishing scam, or possibly someone else using your email.

[Feared-HUN]

My nickname is f********* in some other forums, but noone uses my email address but me, and the nickname f********* is not in my email address. All my previous steam notifications came saying 'dear t********'.

[Supafly]

That is odd. Does it have a link at all? If yes then it sounds like a phishing email. Provides you with incorrect information hoping you'd use the provided link to sign-in and check your account information is correct. However its either installed a keylogger, or is a fake site by entering your login credentials you're actually giving them you username and password.

[Falro the Great]

Could it be you have another account you don't remember?

[Feared-HUN]

Originally posted by Falro the Great:

Could it be you have another account you don't remember?

I thought about this too, but when I searched for the f******* profile, the only user with this name is not me, so I wrote to steam support about this issue.

[Feared-HUN]

Originally posted by Supafly:

That is odd. Does it have a link at all? If yes then it sounds like a phishing email. Provides you with incorrect information hoping you'd use the provided link to sign-in and check your account information is correct. However its either installed a keylogger, or is a fake site by entering your login credentials you're actually giving them you username and password.

It doesn't have a link, it seems like a standard steam support notification, but as I said, I looked at all my steam notifications in the mailbox (including the mail I got after registering to steam) and it all said 'dear t********'..

[Supafly]

What was the address of the sender?

[Feared-HUN]

Steam Support«[e-mail]»

[Feared-HUN]

When I tried to log into steam from a differenc computer, I received a mail with the following:

"Dear t********,

We've received a request to access your Steam account from a new browser
located at IP address: xxxxx
Our records show this IP address is in xxxxxx

If that location does not reasonably match your location or the location of your
Internet Service Provider, then follow this link for more information:
Verify Login Location"

and now I got this weird message with the following:

"Dear f*********,

Here is the Steam Guard code you need to login to account f********:
xxxxx

This email was generated because of a login attempt from a computer located at 193.93.194.51 (RU). The login attempt included your correct account name and password.

The Steam Guard code is required to complete the login. No one can access your account without also accessing this email.

If you are not attempting to login then please change your Steam password, and consider changing your email password as well to ensure your account security.

If you are unable to access your account then use this account specific recovery link for assistance recovering or self-locking your account."

[Si-Fi]

As bizarre as this may sound, the data that is being requested is routed through Russia supposedly coming to or going from you.

On the other computer you mention, did you allow Steam Guard previously?