Steam Web API Key regenerating

[Roxygen]

Hello, recently i was made aware that my account might be compromised due to the fact that my Web API Key keeps regenerating every time i revoke it. I don't know what exactly i did for this to happen, i only play CSGO and recently bought a knife from a trading site (i won't write the name cause i read somewhere that it's not allowed on this forum), anyway i got the knife and it's in my inventory and everything seems legit. But just to be sure i did everything the answer in this question suggests: Link https://steamcommunity.com/discussions/forum/1/3165461775594700594/
except for scanning for Malware because my device is 100% clean.
Even though after all of this the Key keeps regenerating after a few minutes from revoking it.
Does this have to do with me buying that knife?
Can someone pls help, is my account hacked or about to be?

[Wolf Knight]

your account is compromised
DO NOT TRADE
If you have access to the account

Steps to take NOW to secure the account:
1. Scan for malware https://www.malwarebytes.com/
2. Deauthorize all other devices https://store.steampowered.com/twofactor/manage
3. Change passwords from a clean computer
4. Generate new backup codes for your Mobile App https://store.steampowered.com/twofactor/manage
5. Revoke the API key https://steamcommunity.com/dev/apikey (there should be nothing in the APIKEY)


Please review how you are logging into Steam, you somehow gave them your log in information. This could of been due to the computer being compromised and redirecting to a fake login, or you using a 3rd party site to login to steam.

[Roxygen]

Цитата допису Wolf Knight:

your account is compromised
DO NOT TRADE
If you have access to the account

Steps to take NOW to secure the account:
1. Scan for malware https://www.malwarebytes.com/
2. Deauthorize all other devices https://store.steampowered.com/twofactor/manage
3. Change passwords from a clean computer
4. Generate new backup codes for your Mobile App https://store.steampowered.com/twofactor/manage
5. Revoke the API key https://steamcommunity.com/dev/apikey (there should be nothing in the APIKEY)


Please review how you are logging into Steam, you somehow gave them your log in information. This could of been due to the computer being compromised and redirecting to a fake login, or you using a 3rd party site to login to steam.

Thank you for replying, this is the exact same answer i linked above, unfortunately it didn't help because the Key keeps regenerating.

[DC-GS]

When did you buy it and gave access to the trading site?
Probably they are still logged in. AFAIK the only thing that kills an active session is password reset. It's not the same like changing password.

*edit: PW reset also has a temporary trade ban. But since your account is compromised, you should not trade anyway.

[Roxygen]

Цитата допису DC-GS:

When did you buy it and gave access to the trading site?
Probably they are still logged in. AFAIK the only thing that kills an active session is password reset. It's not the same like changing password.

You're right, the site is still logged in and it doesn't even offer a way to disconnect the connection to steam, you can't even delete the trade link, deleting the account on the site is also not doable on your own, i had to open a ticket and according to support it takes 1-3 months. I bought the knife almost 2 weeks ago. I will never trade again after this. When i go to Inventory => Trade Offers => and try to make a New Trade Offer it says (You recently forgot and then reset your Steam account's password. In order to protect the items in your inventory, you will be unable to trade for 3 more days.). Doesn't this mean that i reset the Password and not just changed it?

thx for replying btw

[DC-GS]

Cant tell for sure, I never had first hand expirience with that stuff.

Something you could check is your login history:
https://help.steampowered.com/de/accountdata/SteamLoginHistory

See any login which isnt your location? Is the session active?
Also there is a list for 3rd party logins, but in my case it's empty:
https://help.steampowered.com/de/accountdata/ThirdPartyLogins

Both link can be found under Steam support - Account.

Цитата допису Roxygen:

it says (You recently forgot and then reset your Steam account's password. In order to protect the items in your inventory, you will be unable to trade for 3 more days.). Doesn't this mean that i reset the Password and not just changed it?

AFAIK the trade ban is a week. Did you change your password 4 days ago?

[Roxygen]

Цитата допису DC-GS:

Cant tell for sure, I never had first hand expirience with that stuff.

Something you could check is your login history:
https://help.steampowered.com/de/accountdata/SteamLoginHistory

See any login which isnt your location? Is the session active?
Also there is a list for 3rd party logins, but in my case it's empty:
https://help.steampowered.com/de/accountdata/ThirdPartyLogins

Both link can be found under Steam support - Account.

Цитата допису Roxygen:

it says (You recently forgot and then reset your Steam account's password. In order to protect the items in your inventory, you will be unable to trade for 3 more days.). Doesn't this mean that i reset the Password and not just changed it?

AFAIK the trade ban is a week. Did you change your password 4 days ago?

i checked the login history and there are two very SUS logins from non other than Russia... I then revoked the API Key again, re-logged out of every session and Deauthorized all other devices, reset the steam guard and its been about an hour and the key has not been generated again. It seems to have worked finally.
To answer your question, no i actually reset my Password on Saturday the 10th!

[sporysz]

no

[matty0896]

Цитата допису Bohysinho:

no

lol ok

[matty0896]

Цитата допису Roxygen:

Цитата допису DC-GS:

Cant tell for sure, I never had first hand expirience with that stuff.

Something you could check is your login history:
https://help.steampowered.com/de/accountdata/SteamLoginHistory

See any login which isnt your location? Is the session active?
Also there is a list for 3rd party logins, but in my case it's empty:
https://help.steampowered.com/de/accountdata/ThirdPartyLogins

Both link can be found under Steam support - Account.




AFAIK the trade ban is a week. Did you change your password 4 days ago?

i checked the login history and there are two very SUS logins from non other than Russia... I then revoked the API Key again, re-logged out of every session and Deauthorized all other devices, reset the steam guard and its been about an hour and the key has not been generated again. It seems to have worked finally.
To answer your question, no i actually reset my Password on Saturday the 10th!

curious - how do these trading sites work? they have bot accounts that trade the item to you? how though? do they log into your account and trade it for you?

[Roxygen]

Цитата допису matty0896:

Цитата допису Roxygen:

i checked the login history and there are two very SUS logins from non other than Russia... I then revoked the API Key again, re-logged out of every session and Deauthorized all other devices, reset the steam guard and its been about an hour and the key has not been generated again. It seems to have worked finally.
To answer your question, no i actually reset my Password on Saturday the 10th!

curious - how do these trading sites work? they have bot accounts that trade the item to you? how though? do they log into your account and trade it for you?

I'm not really sure because i've only ever traded once for this Knife i mentioned, but what i did there was login to the trading site using my Steam Account, then put my trading link on that site and that's pretty much it, after you buy the item and the trade ban is over i received a trade offer from a bot, most likely belongs to that trading site. I also only bought something, never sold.

[Lilim]

Цитата допису Roxygen:

...but what i did there was login to the trading site using my Steam Account

Hopefully you will not do that again .

Never share your Steam account details with a third-party site.

[Roxygen]

Цитата допису Lilim:

Цитата допису Roxygen:

...but what i did there was login to the trading site using my Steam Account

Hopefully you will not do that again :hp_kyu:.

Never share your Steam account details with a third-party site.

No way i'll ever do it again xd