My Steam account got cracked along with my Steam Mobile Authentificator and I got robbed

[dread]

Hey, lads, now Ive been going around asking alot about this...
Hello, Steam Support. My account`s CS:GO items got robbed, I was not scammed.Here is what happened:Yesterday(12.07.2020), I went on Marketplace.tf to buy some TF2 items, and I need to sign in, so I used the "Use Steam to sign in" button. Ofcourse, I have Steam Guard Mobile Authentificator since 2015, so I need to add the code to enter with my account Marketplace.tf(which has great reputation). I try ten codes all seem to not work. I try to use the "confirmation" entry and a message pops up - something along the lines of "Your Steam Guard Mobile Authentificator is not working because you have recentrly adjusted your timezone..." something. Obviously, my Steam Guard Mobile Authentificator has been hacked through, so I check my recent trades and see that I have offered a trade to this profile here - "Sorokin_zenon" (0 level shady account), without him giving anything in return, typical robbery.What happened really - this a**hole managed to hack my profile, even while I was using Steam Guard Mobile Authentificator, sent himself and offer and accept it, under my nose. Now that isn`s a scam, it`s robbery, a hijack. This happens on 10th of July, 2020. I learn about this yesterday, 11th of July, 2020.And so, to continue, obviously my Your Steam Guard Mobile Authentificator has been cracked and I remove it to enter my account, but me trying tens of times to do it, earned me a cooldown that last through this moment, which is 12th of July, 2020, the time being 11:30 AM, Eastern European TIme, Sofia, Bulgaria, EU. From me first using Your Steam Guard Mobile Authentificator since 2015, I first stopped using it only yesterday, so I could enter my account, I had it while the robbery was done.All in all, this is the whole story of me being robbed, not scammed."

I got robbed, not by using a third party site, but some guy entered my profile through Steam Guard Mobile Authentificator and robbed me. Sent himself an offer and accepted it himself. I am telling about the third party site, to give you my story of what happened. I could NOT even enter the third party website, because my Steam Guard Mobile Authenficicator was cracked(and was giving me fake numbers) and I could NOT enter my Steam profile

(culprit) Sorokin_zenon`s profile link: https://steamcommunity.com/id/sorokin_zenon

Looking for help to all those who can help, thank you for your time.

My robbed items are still in his possession, a 0 level account.

my profile link: https://steamcommunity.com/id/iliomeister/

images for proof: https://ibb.co/J3JrbPz

https://ibb.co/Q8K5KZT

what am I suppossed to do?
Why does steam support not help its loyal and honest community members?
If I were some big shot, for example, a famous youtuber or professional player, would they help me, or not? Why do common people suffer and pros/youtubers get treated like royalty and get their problems solved?

[Gin]

First of all:

Scan for malware. https://www.malwarebytes.com/

Deauthorize all devices https://store.steampowered.com/twofactor/manage

Change your password on a secure device.

Generate new back up codes. https://store.steampowered.com/twofactor/manage

Revoke the api key https://steamcommunity.com/dev/apikey
If there is nothing in the API key area, that’s fine. If there IS something, remove it. Nothing should be there.

Do the following steps.

[Supafly]

The authenticator wasn't cracked. You gave your username, password and the Steam Guard code to a phishing site. You can the login details away. You gifted the items to another user when you confirmed the trade. Maybe they had physical access to your phone?

No naming and shaming. It's against forum rules. We can't do anything to help you. Reports from a bunch of users with no connection looks dodgy. And the dodgier it looks the more likely Valve would believe they are all false reports and ignore them all. Including yours!

Scammed items are not returned or replaced. When that happened years ago it was exploited.

If you gave your car keys to a stranger and they stole your car no insurance company would hep replace your car because you gave the keys away. Doesn't matter what sort of account holder you are. Rich, poor, famous or not. The same thing applies to us all.

Do the steps in post #1

[dread]

Originally posted by 「 ᵍᶤᶰ 」:

First of all:

Scan for malware. https://www.malwarebytes.com/

Deauthorize all devices https://store.steampowered.com/twofactor/manage

Change your password on a secure device.

Generate new back up codes. https://store.steampowered.com/twofactor/manage

Revoke the api key https://steamcommunity.com/dev/apikey
If there is nothing in the API key area, that’s fine. If there IS something, remove it. Nothing should be there.

Do the following steps.

Done and done

[bazukata37]

успех със това

[dread]

Originally posted by Suicidal Monkey:

The authenticator wasn't cracked. You gave your username, password and the Steam Guard code to a phishing site. You can the login details away. You gifted the items to another user when you confirmed the trade. Maybe they had physical access to your phone?

No naming and shaming. It's against forum rules. We can't do anything to help you. Reports from a bunch of users with no connection looks dodgy. And the dodgier it looks the more likely Valve would believe they are all false reports and ignore them all. Including yours!

Scammed items are not returned or replaced. When that happened years ago it was exploited.

If you gave your car keys to a stranger and they stole your car no insurance company would hep replace your car because you gave the keys away. Doesn't matter what sort of account holder you are. Rich, poor, famous or not. The same thing applies to us all.

Do the steps in post #1

No, no, and no.

I didnt enter any site, except said marketplace tf, which isnt related to csgo and has impeccable reputation.
Also i havent played csgo for a year and a half maybe, let alone enter shady CSGO phishing sites.

I did NOT confirm any trade. Said hacker entered my Steam Acc through Steam Mobile Authenthificator and traded and accepted himself(robbery). I also havent clicked any shady links also, I am sure of that, I can bet my life.
I am a longtime Steam user and Internet user, I know how the E-world works, I know on what to click and on what I should not.

Also, none of my friends use Steam or used my phone, that is for sure.
Also, I was not scammed, I was robbed, big difference.
And yes, if you are for example a pro player, and get the same experience as me, you will be looked after, I know a few lads who had those issues and got resolved, in their favour.
And yes, I will name the hacker, because he is dishonorable.

"If you gave your car keys to a stranger and they stole your car no insurance company would hep replace your car because you gave the keys away. Doesn't matter what sort of account holder you are. Rich, poor, famous or not. The same thing applies to us all."

I know you are trying to help, thank you for that, but that is a dumb statement my friend.
I didnt give any "keys/phones/profiles/enter shady phisisng sites/codes/whatever" to "strangers/shady sites, hackers/friends/enemies" as for the insurance company - If i were scammed, okay, my fault, its on me, but i wasnt, there is a big difference.
Oh and it matters. Let me give u an example - if my car was carjacked, the insurance company would return my losses - 75%/90%whatever. Steam does not work like that. Im irritated because, I know im just a common user and voices like mine are swept under the rug, but if it was lets say s1mple or gla1ve(respect to these players) or any of the big shots, they would be treated well by Steam and their problems will be solved. And there are tens of thousands of people on Steam like me, who did nothing wrong and were wronged and no help is offered to them. That needs to be fixed, and im not talking about automated Steam Support BOT messages - "We basically dont care about our loyal and honest community members, we cant help common people."

.....Excuse me.

[dread]

Originally posted by A no brainer:

"I got robbed, not by using a third party site, but some guy entered my profile through Steam Guard Mobile Authentificator and robbed me."

Wrong. It is VERY imprtant for you to understand what happened:

One possible way works like this (there are others too):


You log into a site that looks like the real one but isn't the real one. The real site might be not a scam or might be into the scam I can't tell BUT

the site you are logging in is a fake that mirrors the real one perfectly. They tell you that your login isn't valid and ask for your codes, while in the background they use these codes to log in your account, because you also gave them already your username and password.

After that they make sure that the authenticator gets deactivated, to do this, they need another code from you. That's why they try to keep you on the fake site as long as possible, making you giving them more and more authenticator codes until they are finished changing everything they need to change, of course one of the first things they change is to deactivate the authenticator, then change phone numbers, mail, password etc.

You helped them to rob you, by giving them every key necessary to your account.

Keyloggers on your PC are another way to do this. Probably came to your PC by clicking on links from "friends"

That is impossible!
I joined(I tried to join, I could not, because I could not enter with my Steam account[It was cracked, so was Steam Mobile Authenthificator]) the third party site on 11th of July, and the trade robbery was done on the 10th of July around 12am EET.

Friday, 10th of July, I was not even home at that time, so I could not have entered any site whatsoever.

Oh yes, I deactivaded it because I could not enter my Steam Account fromt he PC application.
If I didnt deactivade it I would not have written to you folks about it right now.

[Muppet among Puppets]

It happened at least 7 days ago.
What happened today just let you notice it.

Someone got your account name, password and guard codes. Removed auth, waited, traded.