I was hacked today and Steam support just doesnt care

[itsNinjaToast]

Edit #3: i managed to find the person, but he quickly hide his city, if somebody on Steam support reads this, im giving you all the info, for free, you do the rest (photo 3)

Edit #2: i might have got his username, he had changed my Steam Browser to Traditional Chinese, and the first sell he made might have been with himself, I'm trying to see if the city matches from recent login, but it's hard on mobile, and at work.

Edit: i found the hacker location, clearly Steam will ignore him.(photo 2)

I´m really worried about this platform, im trying to get help from support, i was hacked by some CSGO nutjob, that managed to get into my account, sell all my foil card to buy CSGO cases, i noticed in time and delete my paypal info, canceled all logins from devices, but i cant get refund from my cards that i lost, because apparently its my fault that i was hacked.

I´m really freaking out how much freedom hackers have, and that this may happen again.
What can i do to protect myself when Steam just ignores this?

https://steamcommunity.com/sharedfiles/filedetails/?id=2936235705

https://steamcommunity.com/sharedfiles/filedetails/?id=2936238230

https://steamcommunity.com/profiles/76561198891852921

[Mr. Smiles]

https://help.steampowered.com/en/faqs/view/3B6E-B322-2400-8D24

Securing your account is all you can do, your items are gone.

[м]

1. Scan for malware https://www.malwarebytes.com/adwcleaner
2. Deauthorize all other devices https://store.steampowered.com/twofactor/manage
3. Change passwords from another, clean device
4. Generate new backup codes for your mobile app https://store.steampowered.com/twofactor/manage
5. Revoke the API key if you see any over there https://steamcommunity.com/dev/apikey

[Mr. Smiles]

And yes, it is technically your fault you were hijacked... Because in order for someone to gain access to your account you have to leak your credentials including account name, password, and 2fa code.

This is typically done by logging into sketchy third party sites like trade or gamble sites, voting for a team, etc.

Also done by crafty scams users come up with usually involving discord.

Read up on internet security for next time.

[itsNinjaToast]

Originally posted by Mr. Smiles:

https://help.steampowered.com/en/faqs/view/3B6E-B322-2400-8D24

Securing your account is all you can do, your items are gone.

My account is very secured, with Steam Guard even, even 2 factor, but the guy just bypassed all that.

[itsNinjaToast]

Originally posted by Mr. Smiles:

And yes, it is technically your fault you were hijacked... Because in order for someone to gain access to your account you have to leak your credentials including account name, password, and 2fa code.

This is typically done by logging into sketchy third party sites like trade or gamble sites, voting for a team, etc.

Also done by crafty scams users come up with usually involving discord.

Read up on internet security for next time.

i don´t gamble, the only third party site i use is Humble Bundle

[м]

Originally posted by itsNinjaToast:

Originally posted by Mr. Smiles:

https://help.steampowered.com/en/faqs/view/3B6E-B322-2400-8D24

Securing your account is all you can do, your items are gone.

My account is very secured, with Steam Guard even, even 2 factor, but the guy just bypassed all that.

Well, obviously it isn't.

Either you clicked some funny "vote for my team" or "hey bro free $10 steam for you" link or you used a 3rd party site that wasn't exactly safe.

2 factor doesn't help if you give it away to someone else.

[Mr. Smiles]

Did you follow the steps posted in reply 2?

It is imperative you do so.

[Crazy Tiger]

Originally posted by itsNinjaToast:

Originally posted by Mr. Smiles:

https://help.steampowered.com/en/faqs/view/3B6E-B322-2400-8D24

Securing your account is all you can do, your items are gone.

My account is very secured, with Steam Guard even, even 2 factor, but the guy just bypassed all that.

Accounts only get compromised either through phishing or through malware. Find out which of the two it was.

Keep in mind that 2FA is just another code, not some magical shield. When getting phished, one enters the accountname, password and then active guard code and a bot then quickly inputs those to gain access.

So yeah, find out where you leaked the credentials.

[itsNinjaToast]

Originally posted by м:

Originally posted by itsNinjaToast:

My account is very secured, with Steam Guard even, even 2 factor, but the guy just bypassed all that.

Well, obviously it isn't.

Either you clicked some funny "vote for my team" or "hey bro free $10 steam for you" link or you used a 3rd party site that wasn't exactly safe.

2 factor doesn't help if you give it away to someone else.

I´m not the kind of person for vote(unless its here on Steam), gamble (zero tolerance), or click random sutff i don´t know, im super careful about my Steam account, and wacking up by "you sold your items" is really not what i signed up here.

[itsNinjaToast]

Originally posted by Mr. Smiles:

Did you follow the steps posted in reply 2?

It is imperative you do so.

Yes i did, i managed to fend him off, but im afraid he may return, all password are changed, log off from all devices too

[м]

Originally posted by itsNinjaToast:

and wacking up by "you sold your items" is really not what i signed up here.

You know, i understand that this sucks and that you're upset, but you must have done something to get yourself compromised.

Cause it's impossible that a hacker can guess your loginname correctly and then somehow hacks your 2fa code, it's just not possible to do that.

So take a moment to think about what might have caused this and secure your account.

[itsNinjaToast]

Originally posted by м:

Originally posted by itsNinjaToast:

and wacking up by "you sold your items" is really not what i signed up here.

You know, i understand that this sucks and that you're upset, but you must have done something to get yourself compromised.

Cause it's impossible that a hacker can guess your loginname correctly and then somehow hacks your 2fa code, it's just not possible to do that.

So take a moment to think about what might have caused this and secure your account.

Yh sorry man, im just freaking out here a bit, i really like my account, and im even a bit paranoid when it comes to secure it, and just seeing this shows, even with all extra cares nothing is safe

[м]

If you did all the steps, you're good now.

But sadly the cards are gone, there's no way to get them back.

[itsNinjaToast]

Originally posted by м:

If you did all the steps, you're good now.

But sadly the cards are gone, there's no way to get them back.

Thanks for the help man, i really appreciate you guys can do more than support with their copy/paste mssages.
Just afraid to go to work and this guy returns

[Ducks on Fire]

Have you ever used any site that had a "sign in through Steam" link?
Is your password Steam password something that is absolutely impossible for someone to guess?
Is your email password something that is absolutely impossible for someone to guess?
Are they the same password?
What is the "I forgot my password" options for your email account? Is it a security question that someone can easily guess?

Only one or two of those questions has to be a "yes" in order for someone to gain access to your account. I'm not saying that this has to be how someone got in, but to show that it doesn't have to be something like you using a gambling site or clicking a suspicious link.

I'd be willing to bet that in a lot of cases the weak link was a person's email account.