Yay someone hacked my account and sold all my items!

[phos]

I had a user from China log into my account a few days ago without my knowledge. I did not receive an email saying a log in from another device was detected nothing I had no way of knowing. They where in my account for 2 days before selling all my items, even my trading cards etc. and then bought a Dota 2 item they had listed for a massively inflated price. I also stupidly did not have steam guard on because I recently got a new phone and forgot to turn it back on. I know I will not be given the items back so don't jet down into the comments to spam it. I making this to express my concern about the lack of communication from steam here, how can someone just log onto my account and I not receive a single security warning I check my emails frequently so I would of 100% seen it, But no nothing. Also because I did not have steam guard on all the items that was listed should of been placed on a 15 day hold, they did not and this absolutely dumbfounds me how they where even able to sell my items in the first place. So I'm a little pissed not about the items it was about $40 worth of stuff so it's not major but the way there was no warning signs anywhere.

[crunchyfrog]

This is simple, as it's nothing to do with Steam or Valve.

How this happens is you GAVE your account details away, you were not hacked.

The reason you didn't get emails is because the phsiher got access to that too.

If you've ever been to a skin gambling site or voted on a friend team or something, this is how it happens. You probably went there, logged in via steam, browsed around a bit, maybe bought or sold something and left.

A few weeks later, lo and behold, you've had your account stolen. Remember when you logged in via Steam? You didn't - you gave them your details. That's how it works.

So, NOTHING Steam can do can prevent a user from doing that, so I don't know why you';re blakming them for something that is squarely on you.

I get it, it's galling to suffer this, but don't throw blame around. Learn from it.

[phos]

Originally posted by crunchyfrog:

This is simple, as it's nothing to do with Steam or Valve.

How this happens is you GAVE your account details away, you were not hacked.

The reason you didn't get emails is because the phsiher got access to that too.

If you've ever been to a skin gambling site or voted on a friend team or something, this is how it happens. You probably went there, logged in via steam, browsed around a bit, maybe bought or sold something and left.

A few weeks later, lo and behold, you've had your account stolen. Remember when you logged in via Steam? You didn't - you gave them your details. That's how it works.

So, NOTHING Steam can do can prevent a user from doing that, so I don't know why you';re blakming them for something that is squarely on you.

I get it, it's galling to suffer this, but don't throw blame around. Learn from it.

No, I do not use gambling sites at all. I do not click fishy links at all. I did not give away my account details. And if it was nothing to do with valve how on earth would the market listings even go through without the steam guard, They have to go on the 15 day hold. This is what pisses me off.

[wuddih]

clicking phishing links is not the problem, logging in on them is.
you are in a gambling rust group, so it is easy to guess how you got phished. but that does not matter anyway, damage is done.

Please do the following steps in order:

1. Scan for malware (with whatever)
   
2. Deauthorize all other devices
   
   • https://store.steampowered.com/twofactor/manage
3. Generate new backup codes
   
   • https://store.steampowered.com/twofactor/manage
4. Change your Steam account password, preferably from a known safe device.
   
5. Revoke API key
   
   • https://steamcommunity.com/dev/apikey

as for market listings.... under a dollar median price and considerable listing price and done in lower quantity, they do not require confirmation and also dont go in hold. you can thank the people that pressured Valve to change it to that because they were annoyed with confirming cent items.
but on the positive side, you did not lose that much.

[J4MESOX4D]

Originally posted by Phos:

Originally posted by crunchyfrog:

This is simple, as it's nothing to do with Steam or Valve.

How this happens is you GAVE your account details away, you were not hacked.

The reason you didn't get emails is because the phsiher got access to that too.

If you've ever been to a skin gambling site or voted on a friend team or something, this is how it happens. You probably went there, logged in via steam, browsed around a bit, maybe bought or sold something and left.

A few weeks later, lo and behold, you've had your account stolen. Remember when you logged in via Steam? You didn't - you gave them your details. That's how it works.

So, NOTHING Steam can do can prevent a user from doing that, so I don't know why you';re blakming them for something that is squarely on you.

I get it, it's galling to suffer this, but don't throw blame around. Learn from it.

No, I do not use gambling sites at all. I do not click fishy links at all. I did not give away my account details. And if it was nothing to do with valve how on earth would the market listings even go through without the steam guard, They have to go on the 15 day hold. This is what pisses me off.

Either you did this or a hijacker was able to guess your login name, password AND live auth code which is the equivalent of winning the lottery jackpoint a million times in a row. Now which one sounds more likely....

[phos]

Originally posted by wuddih:

clicking phishing links is not the problem, logging in on them is.
you are in a gambling rust group, so it is easy to guess how you got phished. but that does not matter anyway, damage is done.

Please do the following steps in order:

1. Scan for malware (with whatever)
   
2. Deauthorize all other devices
   
   • https://store.steampowered.com/twofactor/manage
3. Generate new backup codes
   
   • https://store.steampowered.com/twofactor/manage
4. Change your Steam account password, preferably from a known safe device.
   
5. Revoke API key
   
   • https://steamcommunity.com/dev/apikey

as for market listings.... under a dollar median price and considerable listing price and done in lower quantity, they do not require confirmation and also dont go in hold. you can thank the people that pressured Valve to change it to that because they were annoyed with confirming cent items.
but on the positive side, you did not lose that much.

Yeah i've changed everything so its all secure now thanks for the list, and people say I can't blame valve but they have stupid design flaws like this. It's not the point I lost that much money but those items still meant something to me and just to have some ♥♥♥♥♥♥♥♥ exploit this for such a measly payout is just annoying.

[phos]

Originally posted by J4MESOX4D:

Originally posted by Phos:

No, I do not use gambling sites at all. I do not click fishy links at all. I did not give away my account details. And if it was nothing to do with valve how on earth would the market listings even go through without the steam guard, They have to go on the 15 day hold. This is what pisses me off.

Either you did this or a hijacker was able to guess your login name, password AND live auth code which is the equivalent of winning the lottery jackpoint a million times in a row. Now which one sounds more likely....

I did not get phished ♥♥♥♥♥♥♥♥♥, I know this 100% I dont log in to any sites that are not 100% approved and safe and I do not click any links from fishy people.

[Frank ツ]

YOU GOT PHISED!!!!

[phos]

Originally posted by Frank:

YOU GOT PHISED!!!!

For the 10 Billionth time

N o.

[𝔇ave]

Originally posted by Phos:

Originally posted by Frank:

YOU GOT PHISED!!!!

For the 10 Billionth time

N o.

If you used your steam login credentials for anything other than steam, you did indeed get phished.. there's no other way this can happen

[phos]

Originally posted by 𝔇ave:

Originally posted by Phos:

For the 10 Billionth time

N o.

If you used your steam login credentials for anything other than steam, you did indeed get phished.. there's no other way this can happen

Yes, as again I have said before I haven't so i'll mark this as the 10,000,000,001st time I have said this.

[Frank ツ]

Originally posted by Phos:

Originally posted by Frank:

YOU GOT PHISED!!!!

For the 10 Billionth time

N o.

Then why ive not been hacked then?

Im sure they would love to steal my items?

[FFL2and3rocks]

Originally posted by Phos:

Yes, as again I have said before I haven't so i'll mark this as the 10,000,000,001st time I have said this.

Then you're either mistaken or lying. They must've obtained your login information somewhere.

[phos]

Originally posted by FFL2and3rocks:

Originally posted by Phos:

Yes, as again I have said before I haven't so i'll mark this as the 10,000,000,001st time I have said this.

Then you're either mistaken or lying. They must've obtained your login information somewhere.

yes I knew this would happen idiots trying to abstract from the main point of my issue of their being nothing to suggest that someone got into my account. Say all you want that I got phished, it isn't going to change the fact that I know I DIDNT.

[phos]

Originally posted by Frank:

Originally posted by Phos:

For the 10 Billionth time

N o.

Then why ive not been hacked then?

Im sure they would love to steal my items?

I have no clue maybe i'm just unlucky.

[Frank ツ]

Originally posted by Phos:

Originally posted by Frank:

Then why ive not been hacked then?

Im sure they would love to steal my items?

I have no clue maybe i'm just unlucky.

Originally posted by Phos:

Originally posted by Frank:

Then why ive not been hacked then?

Im sure they would love to steal my items?

I have no clue maybe i'm just unlucky.

Its impossible to havk a steamaccount.

Also dont make a topic again if you dont like the answers given