Someone tried to log in on my account

[✟alin]

HELP! someone tried logging into my account, i have steam guard enabled on my email. I deauthorized all steam guard devices, changed my password and scanned my pc for any keylogger. I should be safe now?

[Wolf Knight]

make sure the email is from steam by looking at the full headers. also, make sure the email addressed you by your account name. scammers will send out fake emails to random addresses to see if they get a bite.

make sure you do everything listed:

1. Scan for malware https://www.malwarebytes.com/
2. Deauthorize all other devices https://store.steampowered.com/twofactor/manage
3. Change passwords from a clean computer
4. Generate new backup codes for your Mobile App https://store.steampowered.com/twofactor/manage
5. Revoke the API key https://steamcommunity.com/dev/apikey (there should be nothing in the APIKEY)

all 3rd party sites are USE AT OWN RISK. your name history provides a good guess at how they got your log in.

[76561198381812790]

goog

[✟alin]

Postat inițial de Wolf Knight:

make sure the email is from steam by looking at the full headers. also, make sure the email addressed you by your account name. scammers will send out fake emails to random addresses to see if they get a bite.

make sure you do everything listed:

1. Scan for malware https://www.malwarebytes.com/
2. Deauthorize all other devices https://store.steampowered.com/twofactor/manage
3. Change passwords from a clean computer
4. Generate new backup codes for your Mobile App https://store.steampowered.com/twofactor/manage
5. Revoke the API key https://steamcommunity.com/dev/apikey (there should be nothing in the APIKEY)

all 3rd party sites are USE AT OWN RISK. your name history provides a good guess at how they got your log in.

Thanks wolf night, i did all of them, except of 5. What is API Key?

[Wolf Knight]

Postat inițial de SlayeR:

Postat inițial de Wolf Knight:

make sure the email is from steam by looking at the full headers. also, make sure the email addressed you by your account name. scammers will send out fake emails to random addresses to see if they get a bite.

make sure you do everything listed:

1. Scan for malware https://www.malwarebytes.com/
2. Deauthorize all other devices https://store.steampowered.com/twofactor/manage
3. Change passwords from a clean computer
4. Generate new backup codes for your Mobile App https://store.steampowered.com/twofactor/manage
5. Revoke the API key https://steamcommunity.com/dev/apikey (there should be nothing in the APIKEY)

all 3rd party sites are USE AT OWN RISK. your name history provides a good guess at how they got your log in.

Thanks wolf night, i did all of them, except of 5. What is API Key?

if you dont know what it is, then you should not have one. if there is one there, revoke it. the apikey is used by website to interact with the account. scammers use it to monitor and control the account.

IE - you make a trade with someone, the scammer knows you are making a trade, what is being traded, and who you are trading with. the trade is then canceled, recreated going to another account that the scammers control, the new account also copies the avatar and name of the account you wanted the items to go to. all this happens in the time it takes you to look away from your screen and click "Confirm" on your mobile app. some of the bots also check the value of the items and only steal your items if their total value is over a certain amount. no point in burning a compromised account over a 3 cent card when you can wait for a trade worth $100.

[✟alin]

Postat inițial de Wolf Knight:

Postat inițial de SlayeR:

Thanks wolf night, i did all of them, except of 5. What is API Key?

if you dont know what it is, then you should not have one. if there is one there, revoke it. the apikey is used by website to interact with the account. scammers use it to monitor and control the account. IE - you make a trade with someone, they know you are making a trade, what is being traded, and who you are trading with. the trade is then canceled, recreated going to another account that the scammers control, the new account also copies the avatar and name of the account you wanted the items to go to. all this happens in the time it takes you to look away from your screen and click "Confirm" on your mobile app. some of the bots also check the value of the items and only steal your items if their total value is over a certain amount. no point in burning a compromised account over a 3 cent card when you can wait for a trade worth $100.

thanks man, i hope nothing happens till tomorrow( in my country is night time). hope you have a nice day or night idk :))