hacking passwords

[breezerderek]

can anyone assist i keep getting password changed by someone in russia ive changed password 4 times and done the safegurad thing then i get an email in russian saying its been changed again any ideas please ive also scanned the drives but havnt found any malware etc

[Black Blade]

Did you scan using Antimalwarebytes?
When you say the safeguard thing do you mean that to disable it everywhere else?
and did you also try to revoke API key?
https://steamcommunity.com/dev/apikey

[cSg|mc-Hotsauce]

Does the email show your account name? Is it really "your" account name that is mentioned in it?

[breezerderek]

yes the e mail in russian does show my account name im scanning using malware bytes pro and alsobitdefender yes disable everywere else but it said i only have 1 account no i havnt tried the revoke api key mainly as i didnt know what it was

[cSg|mc-Hotsauce]

After the scan...

Deauthorize all devices https://store.steampowered.com/twofactor/manage

Change your password on a secure device.

Generate new back up codes. https://store.steampowered.com/twofactor/manage

Revoke the api key https://steamcommunity.com/dev/apikey

[breezerderek]

thank you for assistance i shall try your recomended 4 ideas hotsauce i not sure what the revoke api key is yet as never had to do it before in like 20 years of using steam account

[breezerderek]

i dont have a website so does the apikey still apply

[Wolf Knight]

Publicado originalmente por dbreezer2:

i dont have a website so does the apikey still apply

revoke it, if there is nothing there then that is a very good sign

[breezerderek]

ok will do thank you

[breezerderek]

it says register a web api key do i do that ?

[cinedine]

Publicado originalmente por dbreezer2:

it says register a web api key do i do that ?

No. Don't worry about this.
Don't even know why this is still in this copy&paste answer.

[heecks]

Also, when you log in avoid typing your password on keyboard ( mainly to avoid key logger ). Use the virtual keyboard or copy / paste.

[Winged One]

Publicado originalmente por Black Blade:

Did you scan using Antimalwarebytes?
When you say the safeguard thing do you mean that to disable it everywhere else?
and did you also try to revoke API key?
https://steamcommunity.com/dev/apikey

Don't rely on solely Malwarebytes, its among the best on detecting certains types of infections but nearly incapable of others (The developers themselves say "its not an anti-virus, its anti-malware and its important to know the difference" as it works in a different manner than a traditional AV)..

as a singular example, malwarebytes is among the few in the world not capable of detecting the EICAR test file (a test file specifically designed to test capability of detecting threats): https://www.virustotal.com/en/file/275a021bbfb6489e54d471899f7db9d1663fc695ec2fe2a2c4538aabf651fd0f/analysis/1425909746/

They also have a habit of removing threats from their database if it hasn't been seen in the wild for several years, meaning if it resurfaces..

not saying don't use malwarebytes, but follow it up in a virus scanner such as ESET or kapersky.. just malwarebytes really isn't enough to go by, you want a second opinion

[Cr4zy3ye]

Did you change your e-mail password? Because in all likelyhood that's what's been hacked here, when you change your steam password it auto sends you and e-mail and if he's hacked it he probably gets that too.

[Black Blade]

Publicado originalmente por theseraph1:

Don't rely on solely Malwarebytes, its among the best on detecting certains types of infections but nearly incapable of others (The developers themselves say "its not an anti-virus, its anti-malware and its important to know the difference" as it works in a different manner than a traditional AV)..

as a singular example, malwarebytes is among the few in the world not capable of detecting the EICAR test file (a test file specifically designed to test capability of detecting threats): https://www.virustotal.com/en/file/275a021bbfb6489e54d471899f7db9d1663fc695ec2fe2a2c4538aabf651fd0f/analysis/1425909746/

They also have a habit of removing threats from their database if it hasn't been seen in the wild for several years, meaning if it resurfaces..

not saying don't use malwarebytes, but follow it up in a virus scanner such as ESET or kapersky.. just malwarebytes really isn't enough to go by, you want a second opinion

I know just most past cases I seen only scan with an antivirus not an antimalware
He said he scan but not with what so went on assuming it to be an antivirus
I really seem to be completely off the uptodate fourms likely need to stop posting till I got the time to refresh my knolage XD

[Winged One]

Publicado originalmente por Black Blade:

Publicado originalmente por theseraph1:

Don't rely on solely Malwarebytes, its among the best on detecting certains types of infections but nearly incapable of others (The developers themselves say "its not an anti-virus, its anti-malware and its important to know the difference" as it works in a different manner than a traditional AV)..

as a singular example, malwarebytes is among the few in the world not capable of detecting the EICAR test file (a test file specifically designed to test capability of detecting threats): https://www.virustotal.com/en/file/275a021bbfb6489e54d471899f7db9d1663fc695ec2fe2a2c4538aabf651fd0f/analysis/1425909746/

They also have a habit of removing threats from their database if it hasn't been seen in the wild for several years, meaning if it resurfaces..

not saying don't use malwarebytes, but follow it up in a virus scanner such as ESET or kapersky.. just malwarebytes really isn't enough to go by, you want a second opinion

I know just most past cases I seen only scan with an antivirus not an antimalware
He said he scan but not with what so went on assuming it to be an antivirus
I really seem to be completely off the uptodate fourms likely need to stop posting till I got the time to refresh my knolage XD

don't worry about it, people say that alot even though it isn't entirely accurated.. while I have found things on clients PC's that malwarebytes can't find, I have also found things it can that others dont.

just sorta bothers me when people make it sound like just Malwarebytes is enough (and people post that alot), because you will need to follow it up with a premium AV as there are certain kinds of threats Malwarebytes just can't detect due to how it scans.. you need to use both, not just one or the other