random steam market purchase

[ψ《J̷0̷R̷D̷4̷N̷》ψ]

so today a couple of mins ago i got a notification of a steam purchase on the market, it was a Dota 2 "faction of the feather - head", i didn't make this purchase and the seller seems to be a new account, i want to know how this happened and how to prevent this.

[Callahan420]

They will not restore items or funds.

Secure the account

Scan for malware https://www.malwarebytes.com/
Deauthorize all other devices https://store.steampowered.com/twofactor/manage
Change passwords from a clean computer
Generate new backup codes https://store.steampowered.com/twofactor/manage
Revoke the API key https://steamcommunity.com/dev/apikey

Stop using third party skin trading/gambling scam sites or clicking suspicious links.

[Nx Machina]

Accounts are PHISHED because the end user gave away all their account details. The account name, the password and the KEY to the door, the Steam Guard Mobile code giving them access to the account.

How? by either logging into a known scam site or sites, tailored malware on your PC, the vote for my team scam, you have a pending ban scam on Discord, free knife click the link etc.

How does Steam (a program) know it is not you when all the account details are correct? It doesn't, therefore any action taken on your account is seen as you doing said actions.

The alternative is not plausible:

1) Someone would have to "GUESS" your account name from "millions of possible combinations".

2) Next they would have to "GUESS" your password from "millions of possible combinations" and then match it to your account name with "millions of possible combinations".

3) And finally they would have to "GUESS" the Steam Guard Mobile code "which changes every 30 seconds" to match both your account name and password to then have access your account.

Note:

1) Only you and Steam Support know your account name until you give it away.

2) Steam passwords are hashed, not stored therefore only you can give it away.

3) They physically need to have your mobile for the code, or you need to enter the code.

[RELIK3002]

eee

[chokingbones]

Same issue here, some guy sold all my stickers and cases on CSGO (valued literally 2$ LMAO) just to get themselves like 1.30$ profit on some Dota 2 purchases.

Did a tracing of the account who "got" into my ♥♥♥♥ and sold it, it seems like there's a bunch of the same profiles that are very new to Steam and have private inventories.

Maybe something bigger is happening then we know? All i know Is I wasn't stupid enough to click on random links or get phishing as I'm smarter then that. (No malware either.)

[Maria]

Originally posted by chokingbones:

...
Maybe something bigger is happening then we know?

Nope, just your run-of-the-mill daily farming of some hijackers.

Originally posted by chokingbones:

All i know Is I wasn't stupid enough to click on random links or get phishing as I'm smarter than that. (No malware either.)

I'm not doubting you, but we never ran out of cases of ppl who got hijacked and proclaimed themselves as a security expert.

[J4MESOX4D]

Originally posted by chokingbones:

Maybe something bigger is happening then we know? All i know Is I wasn't stupid enough to click on random links or get phishing as I'm smarter then that. (No malware either.)

Lol no. You allowed your account to become compromised whether you realise it or not. It is a technical impossibility to get into an account without the required credentials and an authorised independent login so if it wasn't you, then it was someone else with phished access.