Constantly getting alerts of login attempts

[she dead on my lock]

In the past few days, I have gotten maybe 40 login attempts from everchanging IPs and they are only getting more and more frequent, sometimes only minutes apart. I have changed my password several times, even on different devices.

I have run malwarebytes, windows security, and even tdsskiller to see if I was getting keylogged. I even changed my authenticator to steam guard on my phone app.


Still, I am getting email notifications of attempted logins saying that they correctly entered my username and password. My email does not seem to be compromised and I don't think there's anything on my PC, but I really have no clue how they are getting into my account over and over. So far, I don't think they've succesfully logged in and/or accessed my account's funds or anything. I just want to know what the hell to do now, any help would be appreciated!

[Cathulhu]

Are those emails even legit?
Do they contain your account name?

If yes, then consider your account at imminent danger. Someone already knows your account name and password.
Find out how you are leaking your password. Consider your PC compromised and not trustworthy.

[dum monke]

I would suggest enabling 2FA if you haven't already on your steam account and email. It seems like they have access to your email and are resetting your password through that.

Stay safe

[she dead on my lock]

Originally posted by Cathulhu:

Are those emails even legit?
Do they contain your account name?

If yes, then consider your account at imminent danger. Someone already knows your account name and password.
Find out how you are leaking your password. Consider your PC compromised and not trustworthy.

Hmm, that's something I didn't notice until now, it's not using my actual steam ID, but rather my email name. The thing is, everything else about the email is legit, including links and everything else. However, when I compare it to the emails that I requested, they use my steam ID, so maybe I'm not actually compromised. The emails, however, are getting more and more annoying. I've gotten 50 in the past day so I'm more confused than anything else.

I've also changed from email 2fa to the mobile app so I'm even more reluctant to believe it's real.

[wuddih]

You have an account with that account name, registered to that email. And you forgot about it, that you did that.

Yes, it is that simple.

How do they know your credentials?
Data breaches and you reusing passwords.
haveibeenpwned.com

You might wann recover that account and secure it.

[nik3 sharkk]

mayber your account is login in another place but your steam denied the login info
try to change email and your password :)