Got hacked? Purchased item from steam market with overpriced ?

[cyndi♥™]

Got my new pc few days ago. Everything was setup properly. One day I just on the pc, like usual the steam has auto login as default settings.

When i get back from work, I saw my account's wallet purchased a Dota 2 item from the marketplace.

How do I get support from steam?

*NOTE: My account has steam guard, security shield is green. I do not understand how I got hack? Anyone experience this before ?
Thank you

[cyndi♥™]

KalCuey님이 먼저 게시:

Claire님이 먼저 게시:

Old pc do not have steam anymore. This is a completely new build pc.

the short version is you more than likely visited a site that has your steam info and they took your stuff

somewhat longer one is that phishing is the number one way that people are losing their accounts

they either log into one of these sites that offer free stuff

log into a page thinking it is a steam page, usually by clicking a ling from a shady source

they gave their info to someone they thought was steam because of a scam

it is possible that you have a virus/keylogger on your computer, but seeing as you say it is a new setup, it would have had to have been there before and they already had your info, or you carried it over with something from the old one

Well, I couldn't tell. As I only login to steam through the client as it's auto login once I start my pc.
High possible is the virus/malware. Because the pc was build by the pc shop and they had to test out & run the pc before give it to me.

[KalGimpa]

Claire님이 먼저 게시:

KalCuey님이 먼저 게시:

the short version is you more than likely visited a site that has your steam info and they took your stuff

somewhat longer one is that phishing is the number one way that people are losing their accounts

they either log into one of these sites that offer free stuff

log into a page thinking it is a steam page, usually by clicking a ling from a shady source

they gave their info to someone they thought was steam because of a scam

it is possible that you have a virus/keylogger on your computer, but seeing as you say it is a new setup, it would have had to have been there before and they already had your info, or you carried it over with something from the old one

Well, I couldn't tell. As I only login to steam through the client as it's auto login once I start my pc.
High possible is the virus/malware. Because the pc was build by the pc shop and they had to test out & run the pc before give it to me.

have you done the steps that were posted in the first reply?

if not, make sure that you do.

it is possible they the place you took it did that, but very unlikely. it is an obvious attack and one that would immediately be pinpointed to them if you were to look into it

a very reckless thing to do for such a little gain

have you gone to any skin sites for games you play?

clicked any links from friends?

signed up for any kind of giveaway?

[Supafly]

Claire님이 먼저 게시:

Supafly님이 먼저 게시:

New PC but what did you do with your old PC? If that was also set to automatically login to Steam and someone had access to the PC or just the drive then they'd have had access to your account.

Old pc do not have steam anymore. This is a completely new build pc.

Yes I know it's a new build. I was only referring to the old PC as if it still had Steam on it that could have been the source of your account compromise. If you removed steam and no-one has access obviously that can't be the source. Was worth mentioning if only to rule it out

[cyndi♥™]

KalCuey님이 먼저 게시:

Claire님이 먼저 게시:

Well, I couldn't tell. As I only login to steam through the client as it's auto login once I start my pc.
High possible is the virus/malware. Because the pc was build by the pc shop and they had to test out & run the pc before give it to me.

have you done the steps that were posted in the first reply?

if not, make sure that you do.

it is possible they the place you took it did that, but very unlikely. it is an obvious attack and one that would immediately be pinpointed to them if you were to look into it

a very reckless thing to do for such a little gain

have you gone to any skin sites for games you play?

clicked any links from friends?

signed up for any kind of giveaway?

did all the steps from the first reply.

This is why I'm so frustrated about it, because I don't even trade skins or buy skins from other sites except from steam store & marketplace.
Nope, no links from friends and I do not join any giveaway from the youtube or any comments on the discussions.

But once my account was hijacked, made my account purchased the overpriced item from markerplace. I received steam chat pm from friend list, which I never added him. Do not know how he done it. The message is he is from the steam support bla bla bla.

I blocked him straight away, and Valve did ban it as I cant search his account anymore(probably change name). But still, not able to get the funds. Sadly, steam here have many bots account which steam do not care about

[MagicMight]

You either have malware (for example a RAT) on your pc or you were inadvertently phished.

When you buy a new PC it is not a bad idea to reinstall windows, just in case. If you buy a used PC, that advice applies x 1000.

[cyndi♥™]

MagicMight님이 먼저 게시:

You either have malware (for example a RAT) on your pc or you were inadvertently phished.

When you buy a new PC it is not a bad idea to reinstall windows, just in case. If you buy a used PC, that advice applies x 1000.

I bought a new one, there are so many saying. Too bad, im one of the victim

[KalGimpa]

Claire님이 먼저 게시:

KalCuey님이 먼저 게시:

have you done the steps that were posted in the first reply?

if not, make sure that you do.

it is possible they the place you took it did that, but very unlikely. it is an obvious attack and one that would immediately be pinpointed to them if you were to look into it

a very reckless thing to do for such a little gain

have you gone to any skin sites for games you play?

clicked any links from friends?

signed up for any kind of giveaway?

did all the steps from the first reply.

This is why I'm so frustrated about it, because I don't even trade skins or buy skins from other sites except from steam store & marketplace.
Nope, no links from friends and I do not join any giveaway from the youtube or any comments on the discussions.

But once my account was hijacked, made my account purchased the overpriced item from markerplace. I received steam chat pm from friend list, which I never added him. Do not know how he done it. The message is he is from the steam support bla bla bla.

I blocked him straight away, and Valve did ban it as I cant search his account anymore(probably change name). But still, not able to get the funds. Sadly, steam here have many bots account which steam do not care about

was their an api key to clear?

[OneAutumnPlayer]

Ç!ｲ!乙3η-ﾒ님이 먼저 게시:

Do these steps as it sounds like your account is compromised... number 5 is important make sure the text field is empty.

DO NOT TRADE ANYTHING TO ANOTHER ACCOUNT.

1. Scan for malware. You can download the free Malwarebytes here https://www.malwarebytes.com/
2. Deauthorize all other devices here https://store.steampowered.com/twofactor/manage
3. Change passwords from a clean computer
4. Generate new backup codes for your Mobile App here https://store.steampowered.com/twofactor/manage
5. Revoke/Delete the API key here https://steamcommunity.com/dev/apikey (the API key text box should be empty)

------------------------

In future if a site asks you to log in via steam log into this address first:

https://store.steampowered.com/login/

Once logged in refresh the page that is asking you to login via steam using f5. If it is a legit page it will ask you to confirm by clicking a button..

If after you refresh the page still asks for your login details then it is not legit.

this is true the step 5 is the most important one like one time i played in a PC cafe and when i learned about an API scam i checked my and i have put something that i dont really put
note that API key is by default blank and wont contain keys so if your API is not blank and you dont put anything in it you are being spied upon

good thing my account doesnt have anything in it back then so i didn't lose anything else

how did i get API scammed i clicked a link that allegedly will take me to the steam login bar i logged in twice because at first login it refreshed and then the 2nd one logged me in so i think the 1st one got a copy on my answer then redirected me in the original log in bar

this is like 2019 or something so just a head up for those that didn't know

[Ç!ｲ!乙3η-ﾒ]

Was this an account you made or one you purchased from a friend/seller or auction site?

[Hamless Hog]

Claire님이 먼저 게시:

Hogarth님이 먼저 게시:

you didnt get hacked, someone had access to your account.

Like how? Only my dad is in the house 😂

Maybe you gave away your account information?

[J4MESOX4D]

Claire님이 먼저 게시:

KalCuey님이 먼저 게시:

the short version is you more than likely visited a site that has your steam info and they took your stuff

somewhat longer one is that phishing is the number one way that people are losing their accounts

they either log into one of these sites that offer free stuff

log into a page thinking it is a steam page, usually by clicking a ling from a shady source

they gave their info to someone they thought was steam because of a scam

it is possible that you have a virus/keylogger on your computer, but seeing as you say it is a new setup, it would have had to have been there before and they already had your info, or you carried it over with something from the old one

Well, I couldn't tell. As I only login to steam through the client as it's auto login once I start my pc.
High possible is the virus/malware. Because the pc was build by the pc shop and they had to test out & run the pc before give it to me.

Make sure you report this to Steam Support regardless else your account may get flagged down the line for fraudulent activity for manipulating market prices. Some victims just carry on as normal after securing their account then get further kicked in the balls with an account lock soon after.

Best just to make Support aware.

[cyndi♥™]

KalCuey님이 먼저 게시:

Claire님이 먼저 게시:

did all the steps from the first reply.

This is why I'm so frustrated about it, because I don't even trade skins or buy skins from other sites except from steam store & marketplace.
Nope, no links from friends and I do not join any giveaway from the youtube or any comments on the discussions.

But once my account was hijacked, made my account purchased the overpriced item from markerplace. I received steam chat pm from friend list, which I never added him. Do not know how he done it. The message is he is from the steam support bla bla bla.

I blocked him straight away, and Valve did ban it as I cant search his account anymore(probably change name). But still, not able to get the funds. Sadly, steam here have many bots account which steam do not care about

was their an api key to clear?

I was quite curious when I was on the step 5, mine api is not blank. Is it default ?

[cyndi♥™]

J4MESOX4D님이 먼저 게시:

Claire님이 먼저 게시:

Well, I couldn't tell. As I only login to steam through the client as it's auto login once I start my pc.
High possible is the virus/malware. Because the pc was build by the pc shop and they had to test out & run the pc before give it to me.

Make sure you report this to Steam Support regardless else your account may get flagged down the line for fraudulent activity for manipulating market prices. Some victims just carry on as normal after securing their account then get further kicked in the balls with an account lock soon after.

Best just to make Support aware.

Yes, Ive already reported to steam and report the account. Yesterday I received an email that they have took action to the account, but now I search back that hacker's account is now back online. LOL

[cyndi♥™]

Ç!ｲ!乙3η-ﾒ님이 먼저 게시:

Was this an account you made or one you purchased from a friend/seller or auction site?

is my account. I have been using one account, like since the first day i created this account. It's just that I'm less active

[Crazy Tiger]

Claire님이 먼저 게시:

KalCuey님이 먼저 게시:

was their an api key to clear?

I was quite curious when I was on the step 5, mine api is not blank. Is it default ?

By default it's empty (it will say "Register an API key"). If there is an API key that you did not create yourself, that's proof you had a compromised account.

So yeah, either phished or malware in that case.