Account security question

[M3aT]

I've had my account forever and just went through the second account recovery. I've got backup email and Steam Guard two-factor authentication. I do not access email on my machine and do not access steam from anywhere else. Not positive it was hacked or just forgot my password but after getting everything changed I noticed a game installed that i did not install and has been played for 30ish min.. on the day i got steam back in my control. How TF are hackers getting in? where should i look.. I did all the norm stuff to my machine and its clear.. its not someone i know .. trace their IP and break hands next? lol

[nullable]

Well what you're experiencing is not normal, and in my experience the weakest point in any system's security is the user. But it's hard to say exactly how. You've not really provided enough details. And we don't know anything about your machine or your behaviors. Presumably you're doing something you think is safe, but not. Lots of people seem to think 3rd party trading sites are safe for example.

[M3aT]

Thanks for your response, wish I had more info to go off of, just suspicion because of the game that was installed and played on before I got control of my account again. Only time I've ever traded/bought anything is thru here so don't know.. Also had to reinstall one of the main games I play 95% of the time. Guess I'll just be extra careful :)

[Zekiran]

Just in case, do the rest of these things too.

Scan for malware. https://www.malwarebytes.com/

Deauthorize all devices https://store.steampowered.com/twofactor/manage

Change your password on a secure device.

Generate new back up codes. https://store.steampowered.com/twofactor/manage

Revoke the api key https://steamcommunity.com/dev/apikey
** If there is nothing in the API key area, that’s fine. If there IS something, remove it. Nothing should be there.**

[M3aT]

Cool I’ll check the last item when I’m by my machine, only thing I’ve not done. 🤘🏻 you all rock! Thanks for your info😁