Russian IP hacked my account password

[Ergo Ashborn]

I received the steam guard key in email but doesn't seem like they compromised any accounts. How did they crack my password in the first place, I've done AVAST scans (Boot time scan, Smart scan, full scan) and Windows defender scans (Offline scan, full scan). Not a single threat was found on my PC. I also Scanned my mobile with AV and no threats found. I'm knowledgeable enough to not click any links or phishing emails links. I have 2FA across everything. How did the hacker crack my steam password?

[Callahan420]

secure the account

Scan for malware https://www.malwarebytes.com/
Deauthorize all other devices https://store.steampowered.com/twofactor/manage
Change passwords from a clean computer
Generate new backup codes https://store.steampowered.com/twofactor/manage
Revoke the API key https://steamcommunity.com/dev/apikey
Stop using shady third party trade sites or clicking suspicious links.

[magicISO Sweden]

did you use any third party sites where you use the steam login ?

[Ergo Ashborn]

引用自 magicISO Sweden：

did you use any third party sites where you use the steam login ?

I just play CSGO and I never used steam to login anywhere because I don't do trading or items and stuffs. Nor Have I joined any communities because I'm not interested in any of that.

[Cathulhu]

Hijacked, not hacked. You leaked your account credentials somehow.

Do not trade until your account is secured.

Take the following steps to secure your account:

1. Scan for malware. https://www.malwarebytes.com/
2. Check that the email and phone number on the Steam account are still yours.
3. Deauthorize all other devices. https://store.steampowered.com/twofactor/manage
4. Change passwords from a clean computer.
5. Generate new backup codes for your Mobile App. https://store.steampowered.com/twofactor/manage
6. Revoke the API key (there should be no key). https://steamcommunity.com/dev/apikey

Steam does not return inventory items or wallet funds: https://support.steampowered.com/kb_article.php?ref=3415-WAFH-6433#noreturn [/quote]

If you no longer have access to your account, read this:
https://steamcommunity.com/sharedfiles/filedetails/?id=1126288560

[Viking2121]

That happened to my brother, he didn't know what to do so I was able to get a hold of steam support, while the dude that had his account was playing PubG, and was hacking in it, Took a week to get everything all sorted, but what save him was I made him dig into his trash can to find the steam wallet code he used on the account before it was stolen. So its a good idea to keep your receipts that get sent to your email, and even wallet codes just in case.

Got my brothers account back, but the damage was done, his PubG was game banned, we tried contacting BlueHole, the developer, their forums, support ticket, they didn't care, just told us not to cheat anymore even after showing them the logs over and over again (All bans are final) generic response from them.

All I have to say is good luck bro!

[Cathulhu]

Indeed, your brother is responsible for the security of their account and all actions on it.
He failed to secure their account properly, now he has to deal with the consequences of his actions.

[Ergo Ashborn]

引用自 Callahan420：

secure the account

Scan for malware https://www.malwarebytes.com/
Deauthorize all other devices https://store.steampowered.com/twofactor/manage
Change passwords from a clean computer
Generate new backup codes https://store.steampowered.com/twofactor/manage
Revoke the API key https://steamcommunity.com/dev/apikey
Stop using shady third party trade sites or clicking suspicious links.

Thankyou. I don't do trade at all anywhere or click suspicious links. That is why this was a shock to me.

[Supafly]

引用自 Papa Yaga：

Thankyou. I don't do trade at all anywhere or click suspicious links. That is why this was a shock to me.

A good scam/phishing site try not to make the links look suspicious as that would defeat purpose.

[Ergo Ashborn]

引用自 Cathulhu：

Hijacked, not hacked. You leaked your account credentials somehow.

Do not trade until your account is secured.

Take the following steps to secure your account:

1. Scan for malware. https://www.malwarebytes.com/
2. Check that the email and phone number on the Steam account are still yours.
3. Deauthorize all other devices. https://store.steampowered.com/twofactor/manage
4. Change passwords from a clean computer.
5. Generate new backup codes for your Mobile App. https://store.steampowered.com/twofactor/manage
6. Revoke the API key (there should be no key). https://steamcommunity.com/dev/apikey

Steam does not return inventory items or wallet funds: https://support.steampowered.com/kb_article.php?ref=3415-WAFH-6433#noreturn

If you no longer have access to your account, read this:
https://steamcommunity.com/sharedfiles/filedetails/?id=1126288560 [/quote]

Malwarebytes found some adware malware (Adware.Elex) could this compromise my browser passwords from chrome?

[Ergo Ashborn]

引用自 Callahan420：

secure the account

Scan for malware https://www.malwarebytes.com/
Deauthorize all other devices https://store.steampowered.com/twofactor/manage
Change passwords from a clean computer
Generate new backup codes https://store.steampowered.com/twofactor/manage
Revoke the API key https://steamcommunity.com/dev/apikey
Stop using shady third party trade sites or clicking suspicious links.

Malwarebytes found some adware malware (Adware.Elex) could this compromise my browser passwords from chrome?

[Muppet among Puppets]

Do you even use email auth?
Is the hello name in the email your login name?

[Rudol_Von_Stroheim]

My brother got hacked 35 or so minutes ago I don't know what to do

[Cathulhu]

You could read the replies instead of necro'ing a thread.

[Clement]

This thread was quite old before the recent post, so we're locking it to prevent confusion.