Steam wallet used without permission

[SkibidiScouter123]

Earlier today I had around 80$ pending in my account later when I got on to check my wallet it said I only had a dollar. I then looked at my trading history and it said I bought a Dota 2 Item that is normally valued at 0.03$ for 80$ . I had no confirmation sent to my phone and I didn't even have access to my computer at the time, the account name is ctu6zsx if you look at his account it is clearly made as a mule to scam and transport money around. I haven't put my information anywhere else but steam so I don't know how this happened. I have looked at many other threads that have come from earlier this month even extending into April and it is obvious that this scam isn't just a one time thing. I have checked my API Key, My password and my computer and there is nothing compromised. Even with steams 2fa on my phone I had no warning or knowledge that my account was somehow breached/ hijacked. I am simply here to ask how this issue continues to happen and if anyone has found a way to prevent it. <IF you are wondering what threads I am referring to search up Dota 2 Item scam>

[Muppet among Puppets]

At one point someone got all 3 details to login.

Do a virus scan.

Check that the email and phone number on the steam account are still yours.

Deauthorize all devices https://store.steampowered.com/twofactor/manage

Change your password on a secure device.

Generate new back up codes. https://store.steampowered.com/twofactor/manage

Revoke the api key https://steamcommunity.com/dev/apikey

[SkibidiScouter123]

Автор сообщения: Muppet among Puppets

At one point someone got all 3 details to login.

Do a virus scan.

Check that the email and phone number on the steam account are still yours.

Deauthorize all devices https://store.steampowered.com/twofactor/manage

Change your password on a secure device.

Generate new back up codes. https://store.steampowered.com/twofactor/manage

Revoke the api key https://steamcommunity.com/dev/apikey

I did all of these Im just trying to figure out how people are getting me and others info

[Muppet among Puppets]

By users typing them in somewhere. Not that they know they did, or they wouldnt have.

Never log into any given link or button.

[no154370]

never buy steam accounts too

As they are 10000000% vulnerable to being ''hijack''

[IceStorm]

same thing happened to me 2 days ago. Dota2 item bought and i dont even play Dota. Luckily for me was only £3 but could have been much worse. Looked at my authorised devices and it said I had logged in using MY PC in RUSSIA? WTH!! inssstantly revoked access and changed details. Have Steam Guard on but somehow this seems to have been bypassed. Maybe a cookie hijack or something?

[Wren]

This thread was quite old before the recent post, so we're locking it to prevent confusion.