Account got hacked , steam hasn’t responded

[Fresh-Lemon]

So my account got hacked on 4th July 22 around 10pm GMT … i found out about it on 5th July 22 around 4 pm

I’ve had the account for about 9-10 years and has always had the steam guard and mobile number linked to the account. But the hacker bypassed it and when I clicked on the email link for suspicious activity it says link expired ….

Im not sure what I’m suppose to do now, I can’t play games, I have games on my whislist I would like to purchase as it’s on sale right now but I can’t gain access to my main account….

I’ve Tweeted to steam , steam support… no reply , responded to my opened ticket , still no reply.

What can I do to gain access to my account and how safe is it if the hacker can by pass steam guard? … I’m really frustrated

Kind regards

[J4MESOX4D]

You have to recover the account the proper way. Twitter isn't going to do that
https://steamcommunity.com/sharedfiles/filedetails/?id=1126288560

Also Steam Guard cannot be bypassed - somewhere along the lines you gave away your credentials to a phishing login.

[Fresh-Lemon]

Im pretty sure I know how steam guard works …

the fact that they gone into my account with my steam guard activated and changed the phone number associated to my account ^^ , I was using my steam the day before this happened …. As I just bought a game a few days before…. If you aren’t sure but just want to deny my situation , please don’t comment.

And if you have read , I already opened a ticket and provided information … and I also tweeted to them , should give you a sense Of I am in distress , I do not need unnecessary comments from someone who doesn’t read , thank you for you time.

[ReBoot]

Originally posted by Fresh-Lemon:

And if you have read , I already opened a ticket and provided information … and I also tweeted to them , should give you a sense Of I am in distress , I do not need unnecessary comments from someone who doesn’t read , thank you for you time.

It's not like you had any other option but to wait anyway. Well, that, and find out what you've done wrong. They were able to get into your account after all! Think REALLY hard about how & when did you let them into your account so you can learn from your mistake and avoid it in future.

[KalGimpa]

if you want to recover your account, you have to follow that guide

i am sorry your account got compromised, but it was more than likely that you were phished than steam was hacked.

edit: if you still ahve access to your acount

make sure to do all of these

1. Scan for malware https://www.malwarebytes.com/
2. Deauthorize all other devices https://store.steampowered.com/twofactor/manage
3. Change passwords from a trusted/clean computer.
4. Generate new backup codes for your Mobile App https://store.steampowered.com/twofactor/manage
5. Revoke the API key https://steamcommunity.com/dev/apikey (there should be nothing in the APIKEY)

it is omportant that you figure out where it is that your account was hit. as i said, mroe than likely phishing, but you may have a virus/keylogger

[nullable]

If your account is properly secured you'll be safe. If you accidentally expose your account credentials, then you're at risk. Phishing is how a large number of users compromise their accounts. Some of those users are in denial about it because it's a better fantasy that they're infallible, or it's impossible they could have made a mistake millions of other people make, so the issue must be Valve's security that's the problem. Ego is a hell of a drug.

Regardless it's a lot easier to phish users than l33t h4x0r Steam or Steam Guard. But hey, if you're the first victim of a tidal wave of compromised accounts because you're right and Steam Guard can just be bypassed. I'm sure that'll be front page gaming news any minute now...

[Fresh-Lemon]

Um, im not really sure ?

I’ve only been buying games from steam and one other site for years , there weren’t any problems and never log on to any public or other people’s pcs … so it’s even more stressful ..

I did add a new Norton 360 for gamers but that’s about it

And I found out that the new email linked to my account end with RU .. so some random Russian person … ummmm

[ReBoot]

Originally posted by Fresh-Lemon:

Um, im not really sure ?

I’ve only been buying games from steam and one other site for years , there weren’t any problems and never log on to any public or other people’s pcs … so it’s even more stressful ..

I did add a new Norton 360 for gamers but that’s about it

And I found out that the new email linked to my account end with RU .. so some random Russian person … ummmm

You're asserting you'd know it if you had been fooled. However, the whole point of deception is not to let the victim know they're being fooled! You gotta admit, that's kinda obvious.

Norton is among the ♥♥♥♥♥♥♥ AVs there are but that's not the main problem. The main problem is AVs kinda sucking in concept. They're a secondary line of defense with your own vigilance bring the first. Thinking of them as a vaccine genuinely protecting you is foolish indeed.

[Fresh-Lemon]

Do I not need to gain access to my account to access to APIKEY ?

[Fresh-Lemon]

Originally posted by ReBoot:

Originally posted by Fresh-Lemon:

And if you have read , I already opened a ticket and provided information … and I also tweeted to them , should give you a sense Of I am in distress , I do not need unnecessary comments from someone who doesn’t read , thank you for you time.

It's not like you had any other option but to wait anyway. Well, that, and find out what you've done wrong. They were able to get into your account after all! Think REALLY hard about how & when did you let them into your account so you can learn from your mistake and avoid it in future.

Thank you,
It’s just im not sure that’s the problem 😞

[Fresh-Lemon]

Originally posted by ReBoot:

Originally posted by Fresh-Lemon:

Um, im not really sure ?

I’ve only been buying games from steam and one other site for years , there weren’t any problems and never log on to any public or other people’s pcs … so it’s even more stressful ..

I did add a new Norton 360 for gamers but that’s about it

And I found out that the new email linked to my account end with RU .. so some random Russian person … ummmm

You're asserting you'd know it if you had been fooled. However, the whole point of deception is not to let the victim know they're being fooled! You gotta admit, that's kinda obvious.

Norton is among the shutter AVs there are but that's not the main problem. The main problem is AVs kinda sucking in concept. They're a secondary line of defense with your own vigilance bring the first. Thinking of them as a vaccine genuinely protecting you is foolish indeed.

Im just saying what is new that I got …. Do you all have to be so stuck up about someone got their account stolen.. ?

[KalGimpa]

Originally posted by Fresh-Lemon:

Originally posted by ReBoot:

You're asserting you'd know it if you had been fooled. However, the whole point of deception is not to let the victim know they're being fooled! You gotta admit, that's kinda obvious.

Norton is among the shutter AVs there are but that's not the main problem. The main problem is AVs kinda sucking in concept. They're a secondary line of defense with your own vigilance bring the first. Thinking of them as a vaccine genuinely protecting you is foolish indeed.

Im just saying what is new that I got …. Do you all have to be so stuck up about someone got their account stolen.. ?

only the ones that argue about it.

it sucks you lost your account. more than likely you were phished and either gave your info willingly to someone that you

thought was going to give you something for ♥♥♥♥♥♥♥♥♥♥♥ and the like) or for trading,

thought was a frined and wanted you to vote for them

thought you were logging into steam and were in fact logging into a scam site

you could have a virus of some kind. it is less likely but possible

it is NOT steam that got hacked. something i have said to others with this problem

do you think a person that is capable of hacking steam/valve is going to waste their time messing with your account?

they will not. they will scrape the db and run as quietly as they can until they sell the truly valuable info that they got

[ReBoot]

Originally posted by Fresh-Lemon:

Do I not need to gain access to my account to access to APIKEY ?

What do you mean? What do you need your API key for?

[Wizardhermit]

Your account didn't get "hacked" it was hijacked.

Somewhere you were phished by entering all your account information into a scam website. These are usually 3rd party trading sites.

What happens is that scammers create a fake Steam login page, and then lures people to the page.

When the user then enters their username/password, the scammer simply uses them to login themselves.

What every steam user needs to learn is to NEVER use their account to login anywhere other that the actual steam client (or web site).

Typical methods for luring you to a fake steam login:

* Setup a website, and offer users free stuff. User logs in and loses their account.

* A "friend" sends a message asking you to vote for their team in some tournament, usually CSGO, DOTA2 or other popular games, via a link. User logs in and loses their account.

* Someone leaves a comment on your profile, saying how you should join their CSGO team by following a link. User logs in and loses account.

[KalGimpa]

Originally posted by Fresh-Lemon:

Do I not need to gain access to my account to access to APIKEY ?

if there is an api, remove it. it used in a tradinng scam when they scare you into transfering your items to another account to save them. then they move the transaction to another accunt and you lose everything.

edit:i may have misread. if you d o not have access to your account that is comproimised, you will not know about an api. follow the info in the guide first, get your account back, then follow those steps

[nullable]

Originally posted by Fresh-Lemon:

Im just saying what is new that I got …. Do you all have to be so stuck up about someone got their account stolen.. ?

As opposed to wanting to argue with people about the most plausible root cause?

For you this is a big deal, and confusing and irritating and then also being told you're probably the root cause probably isn't what you want to hear. But try to keep in mind this conversation happens every day, thousands of times. And as a result sometimes the user's feelings kinda get steamrolled because the important part is, "Follow this guide. Learn these lessons. Sorry but a lot of your assumptions are wrong. Your ego is gonna have to take a couple of lumps."

I wouldn't take it personal. Follow the guide. Keep an open mind. Be careful trying to float face saving arguments because we've seen every version of them. No one thinks less of you. The stream of users who get their accounts hijacked is endless. We'll be having this same conversation tomorrow. And the next day.

All having your account hijacked means is you're just a regular person who doesn't have much interest in scams or social engineering. And that applies to like 98% of people. No shame there. But being aware you're vulnerable and just a person is a good first step to being able to protect yourself moving forward and to making fewer assumptions when something like this happens.

It can be kinda nice to skip the fluff and get right to the point, and get the problem resolved ASAP. Ultimately that's what most of us want. That's what the first post was going for.