strange question about random friend in my list...

[Rikimaru]

i just had bought a game off key site... clicked a link to receive the game as a gift... loig in to steam blah blah it all went okay and game is on my profile but when i accepted the gift all of a sudden i got a friends request and it was gone ... somehow they accepted themself to my friends list... how did they do that? ideleted the guy straight away but kinguin is the site i used what should i do now :D

[Wolf Knight]

your account is compromised
DO NOT TRADE
If you have access to the account

Steps to take NOW:
1. Scan for malware https://www.malwarebytes.com/
2. Deauthorize all other devices https://store.steampowered.com/twofactor/manage
3. Change passwords from a clean computer
4. Generate new backup codes for your Mobile App https://store.steampowered.com/twofactor/manage
5. Revoke the API key https://steamcommunity.com/dev/apikey (there should be nothing in the APIKEY)


Please review how you are logging into Steam, you somehow gave them your log in information. This could of been due to the computer being compromised and redirecting to a fake login, or you using a 3rd party site to login to steam.

if you bought a gift, then you put your account at risk of being banned by steam. selling of gifts is not allowed. sites can sell KEYS ONLY, stop using shady sites. and I would suggest removing the sites name from your post.

[B-o-B]

There's that name again...
https://steamcommunity.com/discussions/forum/search/?gidforum=882959061466924237&include_deleted=1&q=kinguin

[Rikimaru]

Postat inițial de Wolf Knight:

your account is compromised
DO NOT TRADE
If you have access to the account

Steps to take NOW:
1. Scan for malware https://www.malwarebytes.com/
2. Deauthorize all other devices https://store.steampowered.com/twofactor/manage
3. Change passwords from a clean computer
4. Generate new backup codes for your Mobile App https://store.steampowered.com/twofactor/manage
5. Revoke the API key https://steamcommunity.com/dev/apikey (there should be nothing in the APIKEY)


Please review how you are logging into Steam, you somehow gave them your log in information. This could of been due to the computer being compromised and redirecting to a fake login, or you using a 3rd party site to login to steam.

if you bought a gift, then you put your account at risk of being banned by steam. selling of gifts is not allowed. sites can sell KEYS ONLY, stop using shady sites. and I would suggest removing the sites name from your post.

they have not logged on to my steam there is no way and my api is safe and not active right now.

I just wonder how they accept themselves in to my friends, i can only assume its some issue with steam on the browser that they can affect.

thanks for trying to help though!

[Rikimaru]

Postat inițial de B-o-B:

There's that name again...
https://steamcommunity.com/discussions/forum/search/?gidforum=882959061466924237&include_deleted=1&q=kinguin

i have used kinguin alot i never bought a steam gift before though just keys before... i think kinguin is legit enough its just the people that sell steam gifts throught there obviously have to contact your account at some point... shame it has to be through a browser.

[Wolf Knight]

Postat inițial de 『 Doobius Piff 』:

Postat inițial de Wolf Knight:

your account is compromised
DO NOT TRADE
If you have access to the account

Steps to take NOW:
1. Scan for malware https://www.malwarebytes.com/
2. Deauthorize all other devices https://store.steampowered.com/twofactor/manage
3. Change passwords from a clean computer
4. Generate new backup codes for your Mobile App https://store.steampowered.com/twofactor/manage
5. Revoke the API key https://steamcommunity.com/dev/apikey (there should be nothing in the APIKEY)


Please review how you are logging into Steam, you somehow gave them your log in information. This could of been due to the computer being compromised and redirecting to a fake login, or you using a 3rd party site to login to steam.

if you bought a gift, then you put your account at risk of being banned by steam. selling of gifts is not allowed. sites can sell KEYS ONLY, stop using shady sites. and I would suggest removing the sites name from your post.

they have not logged on to my steam there is no way

people that say that normally follow up with threads titled "Help, my account was stolen" or "Help, my items are gone"

when you use a shady site, it is only a question of when will you get burned. try using legit sites for your keys. if a site is selling "gifts", stop using that site unless you like risking your account.

[Mr. Smiles]

Uses grey market site.

Sees suspicious activity.

"This is fine."

[Muppet among Puppets]

Postat inițial de 『 Doobius Piff 』:

clicked a link to receive the game as a gift... loig in to steam blah blah it all went okay

That link asked you to login?

Never log into links or buttons. Thats how accounts get stolen, 2fa does not protect from effects of inserting all details.. There was no need for that anyway.

To give a gift, you could add them as friend, there is NO reason to let someone add themself as friend to gift. Also the whole construct of the situation is wrong.

Postat inițial de 『 Doobius Piff 』:

they have not logged on to my steam there is no way

They did. That was the way.

[Rikimaru]

Postat inițial de Muppet among Puppets:

Postat inițial de 『 Doobius Piff 』:

clicked a link to receive the game as a gift... loig in to steam blah blah it all went okay

That link asked you to login?

Never log into links or buttons. Thats how accounts get stolen, 2fa does not protect from effects of inserting all details.. There was no need for that anyway.

To give a gift, you could add them as friend, there is NO reason to let someone add themself as friend to gift. Also the whole construct of the situation is wrong.

Postat inițial de 『 Doobius Piff 』:

they have not logged on to my steam there is no way

They did. That was the way.

https://store.steampowered.com/account/ackgift/875D62424E9F1F69?redeemer=dead.blond%40yandex.ru

that is the link

how is that a fake link please explain?

[Rikimaru]

Postat inițial de Wolf Knight:

Postat inițial de 『 Doobius Piff 』:

they have not logged on to my steam there is no way

people that say that normally follow up with threads titled "Help, my account was stolen" or "Help, my items are gone"

when you use a shady site, it is only a question of when will you get burned. try using legit sites for your keys. if a site is selling "gifts", stop using that site unless you like risking your account.

they can't take my account it has no information linked with any thing else (email address and password specifically for steam)
do you have any idea how it happened or are you here to just be a smart ass with no actual input?

This is something i'd like to get to the bottom of what we know is:

they accepted someone on to my friends list
they never got access to the account

so how was this possible and is it only friends list that can be manipulated through the technique they are using?

[Muppet among Puppets]

Postat inițial de 『 Doobius Piff 』:

that is the link

how is that a fake link please explain?

You should not post that link.

Anyway, by accepting a gift from a steam link, the gifter gets added as friend.

[J4MESOX4D]

Postat inițial de 『 Doobius Piff 』:

i just had bought a game off key site... clicked a link to receive the game as a gift... loig in to steam blah blah it all went okay and game is on my profile but when i accepted the gift all of a sudden i got a friends request and it was gone ... somehow they accepted themself to my friends list... how did they do that? ideleted the guy straight away but kinguin is the site i used what should i do now :D

There is nothing to worry about. As said above, when you accept a game gift (old style) the person gifting is added to your friends list by default. All you have to do is remove them.

In future just use sites listed here https://isthereanydeal.com/ because those are safe retailers.