Fell for a phishing site

[[e-mail]]

Hey,

I never thought I'd fall for a phishing scam, but it finally happened. I was on Faceit client and in my notifications was mentioned by what seemed to be the Faceit client itself. It looked like a giveaway the app was hosting, since it was in the app I trusted it. (It was someone's profile made to look like the application.) They had a link to a site something like Faceitepicgiveaway.potato (Not the actual link obviously.)

Essentially, I put in my username, password and authenticator code that was active at the time.

I immediately realized and acted to:
-Change my password
-Revoke my API key
-Check my recent login history (There is no suspicions ones yet).

Is my account re-secure? I see people mentioning 'back up codes' but I've never created any so i don't think i need to make new ones anyway.

Is there anything else I can do? I just want to know ASAP so I cant trade my skins off to a friend if nessecary.

Thanks for any help.

[Bee🐝]

You've wisely done most of it, just a few more steps and you'll be fine:

1. Scan for malware https://www.malwarebytes.com/
2. Deauthorize all other devices https://store.steampowered.com/twofactor/manage
3. Generate new backup codes for your Mobile App https://store.steampowered.com/twofactor/manage

Also, great attitude, more people should be this proactive.

[[e-mail]]

Bee původně napsal:

You've wisely done most of it, just a few more steps and you'll be fine:

1. Scan for malware https://www.malwarebytes.com/
2. Deauthorize all other devices https://store.steampowered.com/twofactor/manage
3. Generate new backup codes for your Mobile App https://store.steampowered.com/twofactor/manage

Also, great attitude, more people should be this proactive.

Hey! Thanks for quick reply.

I've now done step 1 & 2.

For step 3 - "Generate new backup codes for your Mobile App"

I have never actually created back up codes in the first place, do I have to make some to ensure the security of my account? Or can I just leave it as is. Or perhaps I am misunderstanding what they actually are.

Cheers,

[Bee🐝]

Epic.Tree TRADING původně napsal:

Bee původně napsal:

You've wisely done most of it, just a few more steps and you'll be fine:

1. Scan for malware https://www.malwarebytes.com/
2. Deauthorize all other devices https://store.steampowered.com/twofactor/manage
3. Generate new backup codes for your Mobile App https://store.steampowered.com/twofactor/manage

Also, great attitude, more people should be this proactive.

Hey! Thanks for quick reply.

I've now done step 1 & 2.

For step 3 - "Generate new backup codes for your Mobile App"

I have never actually created back up codes in the first place, do I have to make some to ensure the security of my account? Or can I just leave it as is. Or perhaps I am misunderstanding what they actually are.

Cheers,

Oh, totally generate some backup codes and save those in a safe place. If you ever get locked out of your account and you don't have your phone, they'll allow you to log back in without the Steam Guard.

It's great if you lose your phone and generally, just good things to have.

[Bonus!]

F

[[e-mail]]

Bee původně napsal:

Epic.Tree TRADING původně napsal:

Hey! Thanks for quick reply.

I've now done step 1 & 2.

For step 3 - "Generate new backup codes for your Mobile App"

I have never actually created back up codes in the first place, do I have to make some to ensure the security of my account? Or can I just leave it as is. Or perhaps I am misunderstanding what they actually are.

Cheers,

Oh, totally generate some backup codes and save those in a safe place. If you ever get locked out of your account and you don't have your phone, they'll allow you to log back in without the Steam Guard.

It's great if you lose your phone.

Alright. Thanks so much for your fast response, really gave me some closure here - which I was lacking. Simply because of the value of some of the skins I have and it is my nightmare that I lose them. You really helped me out here.

Thanks so much mate,

[Bee🐝]

Epic.Tree TRADING původně napsal:

Bee původně napsal:

Oh, totally generate some backup codes and save those in a safe place. If you ever get locked out of your account and you don't have your phone, they'll allow you to log back in without the Steam Guard.

It's great if you lose your phone.

Alright. Thanks so much for your fast response, really gave me some closure here - which I was lacking. Simply because of the value of some of the skins I have and it is my nightmare that I lose them. You really helped me out here.

Thanks so much mate,

Cool! Glad you spotted it quickly and got it all sorted.