Your Steam account: Access from new computer

[Will Report Flying Cars]

Hi guys, I just got this email from <[e-mail]>

Here is the Steam Guard code you need to login to account (my account name)

This email was generated because of a login attempt from a web or mobile device located at 95.158.37.94 (UA). The login attempt included your correct account name and password.

The Steam Guard code is required to complete the login. No one can access your account without also accessing this email.

If you are not attempting to log in then please change your Steam password, and consider changing your email password as well to ensure your account security.

If I click the link in the email it takes me here;

https://steamcommunity.com/actions/ReportSuspiciousLogin?

Which is actually Steam.

Can I assume my account was actually compromised?

I did already change my password, from inside the Steam client, just in case any phising emails it may have been?

But now I am really worried.

I ran malwarebytes anti malware and found nothing.

[Bonus!]

I could be wrong but I'm pretty sure you're getting hacked man, just contact steam, they are really good with that sort of stuff.

[Will Report Flying Cars]

Originally posted by Bonus!:

I could be wrong but I'm pretty sure you're getting hacked man, just contact steam, they are really good with that sort of stuff.

Ok where can I contact them

[Cathulhu]

https://steamcommunity.com/actions/ReportSuspiciousLogin?

[Shinoskay]

I've gotten a few of these, my two factor authentication has prevented actual access though.

but ya, it's clear that someone has hacked either your account or your device and is trying to access it.

[Joke]

If you are using the same password on different web sites, one of them might have been hacked and passwords leaked.
Test your email here: https://haveibeenpwned.com/

It's a good idea to never use the same password on important accounts.

[C²C^Guyver |NZB|]

Steam accounts are not hacked, they are hijacked.

Your account is compromised. Two factor authentication is pointless if you give away your password, email address and Steam Guard codes....which is the only way Steam accounts are hijacked.

Secure your PC and your Steam and email accounts.


DO NOT TRADE ANY ITEMS OR YOU WILL LOSE THEM.

Steps to take NOW:
1. Scan for malware https://www.malwarebytes.com/
2. Deauthorize all other devices https://store.steampowered.com/twofactor/manage
3. Change passwords from a trusted/clean computer.
4. Generate new backup codes for your Mobile App https://store.steampowered.com/twofactor/manage
5. Revoke the API key https://steamcommunity.com/dev/apikey (there should be nothing in the APIKEY)


Please review how you are logging into Steam, you somehow gave away your log-in information. This could of been due to the computer being compromised and redirecting to a fake log-in, or you using a third party site to log in to Steam.

Once you are sure you have regained control, you can start trading again. Please triple check any trades you make to be sure they are going to the correct account.

After you have secured the account, please edit your profile back to normal, if it was altered by the hijacker/scammer.

[Will Report Flying Cars]

Originally posted by Joke:

If you are using the same password on different web sites, one of them might have been hacked and passwords leaked.
Test your email here: https://haveibeenpwned.com/

It's a good idea to never use the same password on important accounts.

Looks like i was leaked in Nexus Mod Manager and Smogon

Ouch