Please, please help. Getting Chinese emails...? Did I get phished?

[autumn]

Alright, so this will take a bit of explaining. I have an old Steam account I'd forgotten about, and its details must have been in some data breach. I got an email saying someone attempted to log in using the details, but no "New login" email, so they didn't have my email, at least. This email was in English. Please keep that in mind.

That is, this verification code email was in English.

Easy fix, I thought I could just delete the account and move on. So I go through the notions of changing my password, and the email for that is in English, too.

But the password change confirmation was in Chinese.

I then go and try to log into that account. It sends a verification code.
The email is in Chinese. Keep in mind, I did not receive an English equivalent to the email. Just the Chinese one. It provided a legitimate verification code. It let me log in.

... But it was Chinese, whereas the code I got from the breach attempt about 20 hours ago was in English.

Every subsequent attempt at logging in had the emails be in Chinese.

However, emails from Steam Support are in English.

Note: The Steam Support Request email used my display name and was in English (not the account's username, but display name).
The Steam password confirmation email and verification key emails used my actual username, the one I log in with.
The email that sent me the verification code was still called "Steam 客服", whereas the one that sent me the Chinese password confirmation was still "Steam Support".

Did the language simply change? All the information inside was accurate, including the key, and it was sent in, quite literally, a minute. No English email was sent.

Or did I get phished? Please, please help..?

[Wizardhermit]

I get these all the time. If it's in another language or if it says your profile name and not your account name it's fake.

Alternatively, create an email specifically for Steam and Steam only. If you still get those emails to your old email then you know for sure they are fake.

[autumn]

Originally posted by Wizardhermit:

I get these all the time. If it's your profile name and not your account name it's fake.

Alternatively, create an email specifically for Steam and Steam only. If you still get those emails to your old email then you know for sure they are fake.

The Chinese emails had my account name, not my profile name.
And I didn't get any of the Chinese emails without having requested them. That is to say, only one was sent when I wanted to log in, and one was sent to confirm my password change.

They weren't randomly sent.

Does this mean they are legitimate and I can rest easy?

But why are they in Chinese...?

[Wizardhermit]

If you are worried about account security follow these steps exactly and do them all in order.

1. Scan for malware https://www.malwarebytes.com/
2. Deauthorize all other devices https://store.steampowered.com/twofactor/manage
3. Change passwords from a trusted/clean computer.
4. Generate new backup codes for your Mobile App https://store.steampowered.com/twofactor/manage
5. Revoke the API key https://steamcommunity.com/dev/apikey (there should be nothing in the APIKEY)

[autumn]

Originally posted by Wizardhermit:

If you are worried about account security follow these steps exactly and do them all in order.

1. Scan for malware https://www.malwarebytes.com/
2. Deauthorize all other devices https://store.steampowered.com/twofactor/manage
3. Change passwords from a trusted/clean computer.
4. Generate new backup codes for your Mobile App https://store.steampowered.com/twofactor/manage
5. Revoke the API key https://steamcommunity.com/dev/apikey (there should be nothing in the APIKEY)

I'm confused, can you elaborate more on revoking the API key?

[Wizardhermit]

There should be nothing there when you click the link. If there is something there then remove it.

[DaBaby]

kk

[Muppet among Puppets]

Make sure every account has an own password. Just saying