Steam Inventory Items Sold Without my Knowledge

[だりもん]

UNRESOLVED, PLEASE DO NOT CONTACT

12 - 2022: Hello those reading, my case was unresolved. If I remember correctly, all I did was change all my security info and nothing else really happened after. I will not be responding to any further messages, and please do not personally contact me either I will just ignore your message. Please follow the instructions made by the very helpful individuals that responded, and discuss among yourselves.

Thank you and I hope it works out well for you.


-------------------------------------------------------------------------------------------

My steam app did not give me any confirmation, other than one confirmation on my phone that was broken when I tried to look at it (really...). I first noticed when I opened my steam account and found $7.56 in my steam wallet. I instantly checked to see my recent transactions and found "25 Market Transactions" on February 13th, 2021, and "51 Market Transactions" on February 14th, 2021. I'm pretty much worried about my security and the reliability of the steam app.
In total I made like $20+ dollars or something, the "person" even bought an item themselves.

Update: it was $24.49 dolans :/

Since the transactions, I tried emailing valve support but it didn't work (I probably wasn't doing it right) and I already created a family view on my account and changed my password for the second time since January. None of my friends had my January password and even if they did they'd have to bypass the authentication code.

I'm confused because I'm not sure what kind of "hacker" would sell and buy items, literally adding money to my account. Plus the supposed "hacker" didn't think to sell the most valuable items, but still they managed to get a couple I really liked on sold.

I just want my items back and maybe steam can temporarily disable trading on my account? Idk how to do that otherwise.

[Astaroth]

Sadly you won't get your items back https://support.steampowered.com/kb_article.php?ref=9958-MJDG-3003

To secure your account, follow these steps, meanwhile DON'T MAKE ANY TRADES

1. Scan your computer for malware. You can use Malwarebytes[www.malwarebytes.com]
2. Deauthorize all other devices from here
3. Change your password on a secure device from here
4. If you have the Mobile Authenticator enabled, generate new back up codes from here
5. Revoke the API key from here

Also, I see that on February 1st someone commented on your profile asking you to add them, this a very common way to start a scam. Did you interact with that user?

[だりもん]

Originally posted by Astaroth:

Sadly you won't get your items back https://support.steampowered.com/kb_article.php?ref=9958-MJDG-3003

To secure your account, follow these steps, meanwhile DON'T MAKE ANY TRADES

1. Scan your computer for malware. You can use Malwarebytes[www.malwarebytes.com]
2. Deauthorize all other devices from here
3. Change your password on a secure device from here
4. If you have the Mobile Authenticator enabled, generate new back up codes from here
5. Revoke the API key from here

Also, I see that on February 1st someone commented on your profile asking you to add them, this a very common way to start a scam. Did you interact with that user?

Trust me I never fall for those, I guess I forgot about deleting that one. They really won't help me? Even after the steam app failed? My account was very well maintained before I was bypassed, I've changed my password and the only device that has access to this steam account is this pc I'm using, and my old gaming laptop next to me (that's not even logged in to my steam account).

[Astaroth]

Right now the most important is to secure your account, follow the steps in my first comment, in that order. It's very important to do all of them

[だりもん]

Originally posted by Astaroth:

Right now the most important is to secure your account, follow the steps in my first comment, in that order. It's very important to do all of them

Alright I'll go ahead and do them, I also updated my last reply.

[だりもん]

Originally posted by Astaroth:

Right now the most important is to secure your account, follow the steps in my first comment, in that order. It's very important to do all of them

Actually, yeah I forgot to mention that I did get rid of some sort of virus the day it happened to make sure, the thing is I've had the same one 4 days earlier and it didn't bother my steam account anyways, if it was I have no idea how it managed to get through my steam auth, and the verification trades I myself need to verify. It still did and it didn't ask me to verify anything at all which isn't my fault at all...

I kinda hate how steam would probably keep telling me to secure my account despite doing everything they told me to do since day one. Unless you've got some ideas, thanks a whole ton man.

[Morgan Fun Gamer]

Contact steam support quickly! You're account appears to be hacked!

[だりもん]

Originally posted by Morgan Fun Gamer:

Contact steam support quickly! You're account appears to be hacked!

That's what I'm thinking but it's been 3 days since it happened and they haven't changed any crucial data on my steam account, so I'm pretty confused right now as to what even happened and their true intent. If it isn't a hacker it must be some sort of really bad bug. I'll contact steam support soon.

[Morgan Fun Gamer]

Originally posted by Schizakis:

Originally posted by Morgan Fun Gamer:

Contact steam support quickly! You're account appears to be hacked!

That's what I'm thinking but it's been 3 days since it happened and they haven't changed any crucial data on my steam account, so I'm pretty confused right now as to what even happened and their true intent. If it isn't a hacker it must be some sort of really bad bug. I'll contact steam support soon.

Thanks

[J4MESOX4D]

Originally posted by Schizakis:

Originally posted by Morgan Fun Gamer:

Contact steam support quickly! You're account appears to be hacked!

That's what I'm thinking but it's been 3 days since it happened and they haven't changed any crucial data on my steam account, so I'm pretty confused right now as to what even happened and their true intent. If it isn't a hacker it must be some sort of really bad bug. I'll contact steam support soon.

It's not a 'hacker' and it's not a 'bug' either. Somehow you allowed your credentials to be phished and your account compromised. You must work out where you went wrong so palming it off on some nonsensical 'hacker' or a 'bug' is not going to help going forward especially if you're still at risk.

[rawWwRrr]

It's not a hack.

And this:

Originally posted by Schizakis:

My account was very well maintained before I was bypassed, I've changed my password and the only device that has access to this steam account is this pc I'm using, and my old gaming laptop next to me (that's not even logged in to my steam account).

Is a different representation of your ability to secure yourself than this:

Originally posted by Schizakis:

Actually, yeah I forgot to mention that I did get rid of some sort of virus the day it happened

Your issue is not with Steam. Figure out where your security holes are and patch them up.

[だりもん]

Originally posted by J4MESOX4D:

Originally posted by Schizakis:

That's what I'm thinking but it's been 3 days since it happened and they haven't changed any crucial data on my steam account, so I'm pretty confused right now as to what even happened and their true intent. If it isn't a hacker it must be some sort of really bad bug. I'll contact steam support soon.

It's not a 'hacker' and it's not a 'bug' either. Somehow you allowed your credentials to be phished and your account compromised. You must work out where you went wrong so palming it off on some nonsensical 'hacker' or a 'bug' is not going to help going forward especially if you're still at risk.

My steam account is only used on 2 services: Gaijin and Project Reality (both SAFE). Plus I checked if I was logged into any other 3rd party services and steam tells me none. I assure you, I have not entered my credentials into any fishy website, I'm not stupid enough to do any of that.It is very critical that I find out. I currently don't think I'm at risk anymore, just because I did everything I could to make sure that I'm secure universally, but I WILL continue to keep looking around. Thanks and I'll see what I find.

[だりもん]

Originally posted by rawWwRrr:

It's not a hack.

And this:

Originally posted by Schizakis:

My account was very well maintained before I was bypassed, I've changed my password and the only device that has access to this steam account is this pc I'm using, and my old gaming laptop next to me (that's not even logged in to my steam account).

Is a different representation of your ability to secure yourself than this:

Originally posted by Schizakis:

Actually, yeah I forgot to mention that I did get rid of some sort of virus the day it happened

Your issue is not with Steam. Figure out where your security holes are and patch them up.

I don't think its a hack but I'm looking around, I've already ran a couple anti-malware applications and it looks good. Firewall and such is good, I'm currently looking for website that could've caused this but I don't recall going to any weird website, plus I have ad blocker on always so it can't have been an ad I clicked.

[J4MESOX4D]

Originally posted by Schizakis:

Originally posted by J4MESOX4D:

It's not a 'hacker' and it's not a 'bug' either. Somehow you allowed your credentials to be phished and your account compromised. You must work out where you went wrong so palming it off on some nonsensical 'hacker' or a 'bug' is not going to help going forward especially if you're still at risk.

My steam account is only used on 2 services: Gaijin and Project Reality (both SAFE). Plus I checked if I was logged into any other 3rd party services and steam tells me none. I assure you, I have not entered my credentials into any fishy website, I'm not stupid enough to do any of that.It is very critical that I find out. I currently don't think I'm at risk anymore, just because I did everything I could to make sure that I'm secure universally, but I WILL continue to keep looking around. Thanks and I'll see what I find.

If you attempted to login to a phishing window then Steam wont have a record of it being a 3rd party login because it's a fake site. Either your credentials were phished either via a keylogger or because of your input into a fake login or some user performed a miracle by not only guessing your login details, but also a live authenticator code which alone is the equivalent of winning the lottery jackpot a million times in a row.

[だりもん]

Originally posted by J4MESOX4D:

Originally posted by Schizakis:

My steam account is only used on 2 services: Gaijin and Project Reality (both SAFE). Plus I checked if I was logged into any other 3rd party services and steam tells me none. I assure you, I have not entered my credentials into any fishy website, I'm not stupid enough to do any of that.It is very critical that I find out. I currently don't think I'm at risk anymore, just because I did everything I could to make sure that I'm secure universally, but I WILL continue to keep looking around. Thanks and I'll see what I find.

If you attempted to login to a phishing window then Steam wont have a record of it being a 3rd party login because it's a fake site. Either your credentials were phished either via a keylogger or because of your input into a fake login or some user performed a miracle by not only guessing your login details, but also a live authenticator code which alone is the equivalent of winning the lottery jackpot a million times in a row.

hmm well that might explain it, the whole thing was probably just a tasteless troll and I probably won't find a way to do anything about it but I'll go ahead and update the thread if I do, if I don't I'll kill it. My security details have been updated also so thanks @Astaroth for the organized list.

[crunchyfrog]

Originally posted by Schizakis:

Originally posted by Morgan Fun Gamer:

Contact steam support quickly! You're account appears to be hacked!

That's what I'm thinking but it's been 3 days since it happened and they haven't changed any crucial data on my steam account, so I'm pretty confused right now as to what even happened and their true intent. If it isn't a hacker it must be some sort of really bad bug. I'll contact steam support soon.

I wouldn't concentrate too much on how it happened, as it might be nigh on impossible to work out and it's largely wasted energy.

As long as you focus on quickly making sure your account is fixed by following the guides listed, and then making sure you are more careful with downloading stuff in future (maybe virus scan a download BEFORE ever running anything?), you'll be good.

But sadly, as others have said, you will NOT get your items back.

In fact, this is not unusual as ALL service accounts in the real world work like that even banks. Account security ALWAYS remains the users responsibility. They cannot be liable for your actions or inactions.