About Resume Recovery in Email *URGENT* please HELP (Issue Resolved!)

[Illya]

Someone attempted to hack my account to the point I gave him my "RESUME RECOVERY LINK", will he see my "Recovery Code" in my "STEAM GUARD"? can he change my steam passwords? I got logged out in steam today, that does not happen even when there is an update, so I think my account is not secure, what should I do? How do you contact the steam employees to fix my account?

Note: I gave no info about my passwords, but he knows what my email is.
I changed/updated my passwords including my email's.
I Deauthorize all devices.

[King V]

All you have to do now is to let Steam know, with as many details as you can provide. Steam guard is yours and yours only unless someone else has access to it somehow so yes, change your infos again and make sure it's something impossible to guess easily.

[Illya]

@V How do I report to Steam, I Don't know where to start. So you say, they(hacker) might have access already in my steam guard?

[Dr.Shadowds 🐉]

If you still have access to the account do these steps, don't skip any.
1. Scan for malware. https://www.malwarebytes.com/

2. Change password, if another service you use has same old password, ensure change that too.

3. Deauthorize all other devices. https://store.steampowered.com/twofactor/manage

4. Generate new backup codes. https://store.steampowered.com/twofactor/manage

5. Revoke the API key. https://steamcommunity.com/dev/apikey <--- Should be nothing there.




IF you do not have access to your account you need to do this on a broswer while not login.
https://help.steampowered.com/en/faqs/view/0a94-f308-34a5-1988

Recover the account, put in fake email, like ais123@asdj .com and you fail the search, you see a pop up at bottom asking if want to search by login name, click that. Now you be at page to search for account by your login name, once found, click no to all questions, when get to password page, click I forgot password, and you be at the form to fill out for support to recover your account, support will reply in due time, and ask for proof of ownershop. When get your account back, do step 3, 4, and 5 above.





Here tips, and examples to help you give an ideal of types of scams, and phishing attacks that happens online daily that people can fall for, doesn't matter if you think it won't happen to you, it can happen if not paying attention, as some are very good tricks.

Originally posted by Dr.Shadowds 🐉:

Here are the most common reason people get accounts hijack for any service really are as followed.
- Sharing account infomation with others. <--- Very common with impersonators, pretending to be Steam admin / support.
- Logging in on phishing sites. <--- Very common with skin gambling sites.
- Downloading / Installing Virus / Keylogger on your system.
- Using public devices that has keyloggers, such as cyber cafe, school computers, and etc...
- Storing your login credentials on a unsecured service that others has access to view.
- Using same login credentials for all your things, or using same login credentials on another service that had a data leak. Yes it does matter because even if it not related to Steam, if using same login credentials, hijackers will try to use those credentials to see what services you use with those credentials. https://haveibeenpwned.com/

https://youtu.be/9TRR6lHviQc

The type of story scammers say to you.

- "Hey vote for my team", and they link you a phishing site link, and try get you to login.

- "Hey I can't add you, please add me", and they try to start their scam with you.

- If you're friend with someone that got their account hijacked, you get scam message like, "I report you", "you been banned", and whatever to try scare you, and they tell you to trade your items to them, or if you have a login to phishing site may have a API key on account that redirect trades, they ask you to give them money, or etc...

- If you already got your account compromise by them, they change your display name to banned, or whatever, your display picture as well, they may delete your friends, and try to spend your wallet funds if you have any, also trade all your items, but if they see if you have mobile authenticator attached, they play their scam to get you to confirm the trade to get your items off your account to their account quicker if they're able to trick you into confirming the trade.


I show you few examples.
https://steamcommunity.com/sharedfiles/filedetails/?id=2329645315
https://steamcommunity.com/sharedfiles/filedetails/?id=2570975058

https://youtu.be/JuWHCBeZrqI
https://www.youtube.com/watch?v=kook1DlxDAw
https://www.youtube.com/watch?v=0DDnV-MHSaY
https://www.youtube.com/watch?v=WfTXxLraokE

https://steamcommunity.com/discussions/forum/1/4956744526904317093/#c4956744526904653890

[Illya]

@Dr.Shadowds Yes I do still have access, is it ok to do the steps in this order?
2, 4, 3, 5, 1(stillscanning)? Thanks for the infos of the scamming types. will I be fine(secured) after I did this?

[Dr.Shadowds 🐉]

Originally posted by Illya:

@Dr.Shadowds Yes I do still have access, is it ok to do the steps in this order?
2, 4, 3, 5, 1(stillscanning)? Thanks for the infos of the scamming types

Yes, as long you have control of the account, these steps help you ensure your system is clear, and kick the hijacker off the account.

After done the 5 steps, read my tips above to help you on internet safety, it gives you ideas how scammers try to trick people.

[Illya]

@Dr.Shadowds Thanks man I needed that confirmation that my account will be secured.

I will read your tips.

[Muppet among Puppets]

Originally posted by Illya:

Someone attempted to hack my account to the point I gave him my "RESUME RECOVERY LINK"

What does that mean?