Auto Spamming messages

[Your Huckleberry]

I just opened my steam account to be surprised that my account was spam messaging all my friends list with a fake gift link! anyone have an idea what is it and what if that means that i got hacked somehow?

[d3str0y3r]

Your account is compromised.

Steps to take NOW to secure the account:
1. Scan for malware https://www.malwarebytes.com/
2. Deauthorize all other devices https://store.steampowered.com/twofactor/manage
3. Change passwords from a clean computer
4. Generate new backup codes for your Mobile App https://store.steampowered.com/twofactor/manage
5. Revoke the API key https://steamcommunity.com/dev/apikey (there should be nothing in the APIKEY)

[DarkCrystalMethod]

1. Go change your password RIGHT NOW
2. Go to the steam guard settings and click deauthorize all machines
3. Log back in as soon as possible, turn on steam guard.

Others will be around shortly with the usual malwarebytes scan, Steam API key clearing, and other instructions.

Oh, there they are(ABOVE)

[Your Huckleberry]

Thx for helping. i've downloaded the malware scan app &found some detections,then checked authorized devices and found a new one at Hong Kong that logged throw email code yesterday removed it and changed my passwords and enabled the 2 factor auth also generated new backup codes. API needs registering should i continue with it?

[DarkCrystalMethod]

blank out the api... if here's a number in there thats bad... unless thats a number you're using to actually make API calls(which you probably aren't doing yet).

[Your Huckleberry]

k will do it one more thing what is that domain name thing?

[DarkCrystalMethod]

The Domain Name should be empty and the checkbox unchecked.

[DarkCrystalMethod]

Once you have all of that done figure out which trading website you literally gave your login credentials to as they're probably a bad guy. Not a hack, but a bad actor/admin on their site had your login and password because you told it to them. Be more careful next time.

[Your Huckleberry]

yeah they are i mean nothing is happening whet trying to press register so i figured i should type a Domain name but i don't know what it is

[DarkCrystalMethod]

Originally posted by Boon:Cena:

yeah they are i mean nothing is happening whet trying to press register so i figured i should type a Domain name but i don't know what it is

That means you're already done. If you did have something there you might see a button to 'clear' it.

[Your Huckleberry]

Thx a lot for the help <3. i should check all the websites I've been dealing with before as i have not purchased or traded anything lately so maybe the coordinates are just laying somewhere out there!

[no154370]

beware of downloading 3rd party mods outside of steam games mod forums

You got malware because you go download things through the computer web browser

[Your Huckleberry]

Maybe it's a gift site or 3rd party selling keys like HB or GA it's been awhile since the last time i did it but maybe it's. Thx for the advice

[Ettanin]

Originally posted by Boon:Cena:

Thx for helping. i've downloaded the malware scan app &found some detections,then checked authorized devices and found a new one at Hong Kong that logged throw email code yesterday removed it and changed my passwords and enabled the 2 factor auth also generated new backup codes. API needs registering should i continue with it?

in that case check that the email address and phone number associated to the account are still yours.

Also verify that you still have access to your email account and change its password as well.

[Your Huckleberry]

Yeah did it all it. Appears my main Email was the problem as other accounts on other platforms had some issues too so i made some changes to it. Thx