Spamming friendlist with scam link

[Ray]

Hi, so my little brother clicked are link and now he spam all the time with scam link his friends.
I tried to reinstall windows but not helped.
Can someone explain some steps i should do to fix this issue?
Much appreciated for help.

[м]

1. Scan for malware hhttps://www.malwarebytes.com/adwcleaner
2. Deauthorize all other devices https://store.steampowered.com/twofactor/manage
3. Change passwords from another, clean device
4. Generate new backup codes for your mobile app https://store.steampowered.com/twofactor/manage
5. Revoke the API key if you see any over there https://steamcommunity.com/dev/apikey

[ReBoot]

What happened after your brother "clicked are link"? This can't happen from merely clicking a link.

[DC-GS]

Originalmente postado por м:

3. Change passwords from another, clean device

Better reset the password.
A reset will invalidate all sessions, logging them out.

[Ray]

Originalmente postado por ReBoot:

What happened after your brother "clicked are link"? This can't happen from merely clicking a link.

he logged on site and after that spam started.

[Supafly]

Originalmente postado por Ray:

Originalmente postado por ReBoot:

What happened after your brother "clicked are link"? This can't happen from merely clicking a link.

he logged on site and after that spam started.

Then have him do all the steps in post #1

Reinstalling windows does nothing because the account is compromised not the computer

[м]

Originalmente postado por DC-GS:

Better reset the password.
A reset will invalidate all sessions, logging them out.

Guess you missed step 2?

[Ray]

Originalmente postado por Supafly:

Originalmente postado por Ray:

he logged on site and after that spam started.

Then have him do all the steps in post #1

Reinstalling windows does nothing because the account is compromised not the computer

Originalmente postado por м:

1. Scan for malware hhttps://www.malwarebytes.com/adwcleaner
2. Deauthorize all other devices https://store.steampowered.com/twofactor/manage
3. Change passwords from another, clean device
4. Generate new backup codes for your mobile app https://store.steampowered.com/twofactor/manage
5. Revoke the API key if you see any over there https://steamcommunity.com/dev/apikey

done, will see if this help.

[Supafly]

Originalmente postado por Ray:

Originalmente postado por Supafly:

Then have him do all the steps in post #1

Reinstalling windows does nothing because the account is compromised not the computer

Originalmente postado por м:

1. Scan for malware hhttps://www.malwarebytes.com/adwcleaner
2. Deauthorize all other devices https://store.steampowered.com/twofactor/manage
3. Change passwords from another, clean device
4. Generate new backup codes for your mobile app https://store.steampowered.com/twofactor/manage
5. Revoke the API key if you see any over there https://steamcommunity.com/dev/apikey

done, will see if this help.

Once his account is secure tell him if he insists on using third party sites do it the safe way

1. Open Web browser
2. Login on Steams Official page
3. Visit Third party site
4. Look for and use the one click login button
5. If 4 doesn't work and you're asked for you username, password and Guard code your on a phishing site. LEAVE and DO NOT use again

Can also use sites like scamadviser.com to check how trustworthy a site is before using it. Works for any site not just Steam related. Use it whenever entering login credentials or banking data

[DC-GS]

Originalmente postado por м:

Originalmente postado por DC-GS:

Better reset the password.
A reset will invalidate all sessions, logging them out.

Guess you missed step 2? :starhappy:

Did not.

[Supafly]

Originalmente postado por DC-GS:

Originalmente postado por м:

Guess you missed step 2? :starhappy:

Did not.

Step 2 does what you said but without causing the restrictions resetting the password does.

It also won't help if hijackers generated an API key. That's why all 5 are recommended

[DC-GS]

It will only revoke the 2fa auth, not the session. As long the user/bot remains logged in, they still have access.

[Supafly]

Originalmente postado por DC-GS:

It will only revoke the 2fa auth, not the session. As long the user/bot remains logged in, they still have access.

From the link
'Your Steam authorized devices
You can use Steam Guard on the Steam Mobile App to view details about the devices that you have authorized to access your Steam account, and log out any device that you no longer trust.
Click below to log out all computers or devices that you have used, including this one.'


Thus it kicks ALL out including the device you use to deauthorise all devices