API scam HELP

[GrievousDemise]

so i fell for an API scam, i was able to revoke the key, change my password, and generate a new trade URL. API scams are new to me, i need to know if my account is now secure again and those who had access have lost access. I have a mental disability and i would like to know if im safe again

[Fake]

Trade URL?

[GrievousDemise]

trade offer URL, so if im on backpack.tf, you can click my trade URL and send me an offer

[Fake]

Why are you using 3rd party sites to make trades?

[GrievousDemise]

i was sent a like to a phishing site, how about provide some answers to my question in the OP?

[The Giving One]

We usually post this list for everyone in your case :

Scan for malware. https://www.malwarebytes.com/

Deauthorize all devices https://store.steampowered.com/twofactor/manage

Change your password on a secure device.

Generate new back up codes.

Revoke the api key https://steamcommunity.com/dev/apikey

You must do all of the steps to be sure your PC and account are secure. You cannot skip any steps.

[GrievousDemise]

Publicado originalmente por The Giving One:

We usually post this list for everyone in your case :

Scan for malware. https://www.malwarebytes.com/

Deauthorize all devices https://store.steampowered.com/twofactor/manage

Change your password on a secure device.

Generate new back up codes.

Revoke the api key https://steamcommunity.com/dev/apikey

You must do all of the steps to be sure your PC and account are secure. You cannot skip any steps.

i did all of those steps, is my account secure again?

[The Giving One]

Publicado originalmente por Grievous623:

i did all of those steps, is my account secure again?

If you had all the expected clean results from each step, yes, it should be, except for one problem :

Publicado originalmente por Grievous623:

trade offer URL, so if im on backpack.tf, you can click my trade URL and send me an offer

You don't seem to have learned from this, and keep using third party sites.

So if you continue to do that, no your account and/or PC may be at risk.

[GrievousDemise]

Publicado originalmente por The Giving One:

Publicado originalmente por Grievous623:

i did all of those steps, is my account secure again?

If you had all the expected clean results from each step, yes, it should be, except for one problem :

Publicado originalmente por Grievous623:

trade offer URL, so if im on backpack.tf, you can click my trade URL and send me an offer

You don't seem to have learned from this, and keep using third party sites.

So if you continue to do that, no your account and/or PC may be at risk.

i have not logged into backpack.tf since i reset everything

[The Giving One]

Publicado originalmente por Grievous623:

i have not logged into backpack.tf since i reset everything

That's good, so continue to use good security practices with your login, and you should be fine.

If you are sure you have done all of the steps above, and all was reported as clean/removed/deauthorized, then your account should be secure for now.

[GrievousDemise]

Publicado originalmente por The Giving One:

Publicado originalmente por Grievous623:

i have not logged into backpack.tf since i reset everything

That's good, so continue to use good security practices with your login, and you should be fine.

If you are sure you have done all of the steps above, and all was reported as clean/removed/deauthorized, then your account should be secure for now.

i did a clean wipe, changed my password, used both of my anti virus programs, reset my steam gaurd and revoked my trade API, evenc hanged my email password, i just want to make sure they bad guys lost access

[The Giving One]

Publicado originalmente por Grievous623:

i did a clean wipe, changed my password, used both of my anti virus programs, reset my steam gaurd and revoked my trade API, evenc hanged my email password, i just want to make sure they bad guys lost access

If by using "both antivirus programs", that included Malwarebytes, then that's fine.

It's usually best to use Safe Mode in Windows and scan as intensively as you can, keyloggers included. Some antivirus programs are not very good at doing that.

Malwarebytes is best and that is the one we always suggest. You said you clicked on a link, so I would be sure if I was in your shoes.

[GrievousDemise]

i don't see any key-logger programs in startup programs, and i have ran multiple scans with malwarebytes saying in secure

[The Giving One]

Publicado originalmente por Grievous623:

i don't see any key-logger programs in startup programs, and i have ran multiple scans with malwarebytes saying in secure

If you feel you have scanned well enough, then you have to be comfortable with your PC and account being secure at this point. Obviously, without access to your PC, we can't guarantee anything for you.

All we can do is give you the steps we give everyone here in your case. Making sure they have been done to the best of your ability is something you have to do and be comfortable with.

[GrievousDemise]

Publicado originalmente por The Giving One:

Publicado originalmente por Grievous623:

i don't see any key-logger programs in startup programs, and i have ran multiple scans with malwarebytes saying in secure

If you feel you have scanned well enough, then you have to be comfortable with your PC and account being secure at this point. Obviously, without access to your PC, we can't guarantee anything for you.

All we can do is give you the steps we give everyone here in your case. Making sure they have been done to the best of your ability is something you have to do and be comfortable with.

well thank you sir/maam, if doing all those things have re-secured my account and i did all of the steps then i feel safe

[GrievousDemise]

Publicado originalmente por The Giving One:

Publicado originalmente por Grievous623:

i don't see any key-logger programs in startup programs, and i have ran multiple scans with malwarebytes saying in secure

If you feel you have scanned well enough, then you have to be comfortable with your PC and account being secure at this point. Obviously, without access to your PC, we can't guarantee anything for you.

All we can do is give you the steps we give everyone here in your case. Making sure they have been done to the best of your ability is something you have to do and be comfortable with.

I got one more question, once i revoke the API key and reset everything, the people who got access no longer have access?