Steam account security was breached, what now?

[Sevrin]

So my steam account password changed out of nowhere. So I changed it to something new, logged in again. Everything seemed fine. The next day, steam account password changed again. Try to change the password again, email was also breached, email password got changed. Recover the email, recover the steam, new passwords on both, but I'm sensing a pattern. Now I'm worried my recovery email for my steam email will be next. Virus scan turned up no results. What's next?
Nothing on my steam account seems to be different after the breach though, so I'm not really certain what's going on here.

[crunchyfrog]

Sevrin님이 먼저 게시:

Well I haven't had any issues since so, seems to be fine for now. I'm using much more secure passwords for both the email and steam.

The thing you need to remember, is that if you've only changed your passwords and logins, then yeah, you're going to appear fine, but you aren't solving ANYTHING. Because the scammer will get to knwo these too. It might be a few days before they realise, but they will.

This is why you need to disinfect FIRST, so I hope you mean you've done that. Otherwise you're just wasting your time.

[Muppet among Puppets]

crunchyfrog님이 먼저 게시:

JC님이 먼저 게시:

Give malwarebytes.com a try. Also you can check haveibeenpwned .com or .org, or something, just search it.. add your e-mail and scroll down and click on the thing at the bottom and it will tell you all the places your e-mail has been part of a breach.

I used to recommend haveibeenpwned, but it was pointed out to me recently that it's questionable in results.

You can make a brand new email account right now, and check it and it will say it's been breached.

So, I wouldn't advise it's authenticity.

I tested my oldest email, which was "part of a breach" ages ago. But it said, all good.
Maybe because they could not calculate the password from that breach.

On that email i got the perfect ppal phishing email. After the breach once. By the official guidelines it was "legit".
But i dont trust emails. That should be official guideline.

[crunchyfrog]

Muppet among Puppets님이 먼저 게시:

crunchyfrog님이 먼저 게시:

I used to recommend haveibeenpwned, but it was pointed out to me recently that it's questionable in results.

You can make a brand new email account right now, and check it and it will say it's been breached.

So, I wouldn't advise it's authenticity.

I tested my oldest email, which was "part of a breach" ages ago. But it said, all good.
Maybe because they could not calculate the password from that breach.

On that email i got the perfect ppal phishing email. After the breach once. By the official guidelines it was "legit".
But i dont trust emails. That should be official guideline.

Yup, better to be safe than sorry. Don't trust ANYTHING.

I will say I found haveibeenpwned useful myself as it did let me know about a Lord of the Rings Online breach of a few years ago which did affect me slightly. BUt it's questionable when you can just make a brand new account right now and check it and it's been "pwned". That shows it's not doing something right.

[Insomnia]

I never click links in emails ever, The only exception is when I'm resetting a password and the email link comes instantly as soon as I ask for it or one of they verify account emails that I requested right away. I also don't click links online either, just makes it easier and safer.