Someone has logged into my steam account

[EXTREMO]

Today I received an email from steam thanking me for buying an item worth €52 (which I had in my steam wallet).
I have steam guard, I have 2-factor authentication on everything and still someone managed to log into my account and I didn't even receive a security haviso email.
I already sent 3 tickets and still got no response.
I don't think I was at all to blame because I couldn't do it to prevent myself, if I had received an account access email I would have noticed and changed the password, but they didn't even give me a chance to protect myself and I ended up losing all the money saved there.

if anyone can help me or give tips on something I would be grateful

[Nx Machina]

You gave them your account name, password and the key to the door, the Steam Guard code, either by logging into a known scam site, voting for a team link or falling for the "fake" Steam admin on discord.

Do all the following.

1. Scan for malware https://www.malwarebytes.com/

2. Deauthorize all other devices https://store.steampowered.com/twofactor/manage

3. Change passwords from a clean computer

4. Generate new backup codes for your Mobile App https://store.steampowered.com/twofactor/manage

5. Revoke the API key at https://steamcommunity.com/dev/apikey (there should be nothing in the APIKEY)

[EXTREMO]

I dont give my acount name our password, some one just enter in my account. I have all security in my steam, steam guard, 2FA and a good password

[Nx Machina]

Originally posted by EXTREMO:

I dont give my acount name our password, some one just enter in my account. I have all security in my steam, steam guard, 2FA and a good password

They cannot enter your account wthout ALL the details and they could have got those details months ago.

Do all steps as your account is not secure.

[J4MESOX4D]

Originally posted by EXTREMO:

I dont give my acount name our password, some one just enter in my account. I have all security in my steam, steam guard, 2FA and a good password

Your credentials were phished and then login-botted. Work out where you went wrong because for someone to enter your account successfully without these details is a one in one hundred trillion shot.

[丰]

г6г новллрелл

[EXTREMO]

Originally posted by Nx Machina:

Originally posted by EXTREMO:

I dont give my acount name our password, some one just enter in my account. I have all security in my steam, steam guard, 2FA and a good password

They cannot enter your account wthout ALL the details and they could have got those details months ago.

Do all steps as your account is not secure.

Man i just dont share with anyone, i dont use sites i dont know.

[EXTREMO]

Originally posted by Nx Machina:

Originally posted by EXTREMO:

I dont give my acount name our password, some one just enter in my account. I have all security in my steam, steam guard, 2FA and a good password

They cannot enter your account wthout ALL the details and they could have got those details months ago.

Do all steps as your account is not secure.

I did the steps and it says there is no virus, I changed the pass as soon as I received the purchase email

[Brian9824]

Originally posted by EXTREMO:

Originally posted by Nx Machina:

They cannot enter your account wthout ALL the details and they could have got those details months ago.

Do all steps as your account is not secure.

I did the steps and it says there is no virus, I changed the pass as soon as I received the purchase email

Again you gave out your credentials somewhere, it could have been a voting site, a link a friend sent, etc. It could have been weeks or months ago.

No one hacked steam's servers and stole just the login to your account.

[J4MESOX4D]

Originally posted by EXTREMO:

Originally posted by Nx Machina:

They cannot enter your account wthout ALL the details and they could have got those details months ago.

Do all steps as your account is not secure.

i dont use sites i dont know.

Just because you know a site doesn't make it legit. Somewhere along the lines you gave away your credentials to a 3rd party login and these were captured, login-botted and your account was shadow-hijacked without your knowledge.

[Supafly]

Originally posted by EXTREMO:

Originally posted by Nx Machina:

They cannot enter your account wthout ALL the details and they could have got those details months ago.

Do all steps as your account is not secure.

Man i just dont share with anyone, i dont use sites i dont know.

Doesn't mater whether you know them or not. You entered your login information on a phishing website. That is the ONLY way someone got access to you login details and a LIVE guard code.

Do the steps above to secure your account and if you insist on using third party sites do it the safe way

1. Open Web browser
2. Login on Steams Official page
3. Visit Third party site
4. Look for and use the one click login button
5. If 4 doesn't work and you're asked for you username, password and Guard code your on a phishing site. LEAVE and DO NOT use again

Can also use sites like scamadviser.com to check how trustworthy a site is before using it. Works for any site not just Steam related. Use it whenever entering login credentials or banking data