Steam Inventory Helper or how my account was drained to the last cent

[dieta-bozhenki]

It all started a couple of days ago.. I received a letter in the mail that someone bought an item from me for 0.1 cent, the item was from Dota 2 and of course I was surprised that someone bought it, although such no-name items have been in active lots for an eternity . I am entering the Steam purely to play something, so I didn’t watch every minute, but on Sunday I went to play Ready or Not with a friend and after a 3-hour session I came out and saw that I had 0.1 cent on my balance, I immediately got nervous, I thought it was a joke and that when I re-logged everything would return, but now I refresh the page for the third time, and the balance is still the same...

Then I went to the email. And so I see the picture.. In one second, 55 messages came from Steam that I had successfully sold items on the trading platform (at that moment I was not at home) and then after these letters a new letter arrives that reads: “congratulations on your purchase of useless Dota 2 items for a few cents worth 16 euros! I simply fell out then, because I had these 16 euros and was just thinking about buying something, but they were gone.. Then came the hacking of Instagram, after which I was notified on other social networks that suspicious actions had been noticed. Then I got really worried, like, was I really hacked, like I can't click anymore on scam links like many years ago... Yes, I miscalculated, but where?

Actually, I decide to go afterwards to browser Steam, where at the top, as if in some kind of app, an English inscription was moving with some kind of warning, etc. At first I ignored it, but luckily a friend was on discord and said that he didn’t have one. Then I remembered that I installed SIH (Steam Inventory Helper), which in one click could sell your entire inventory without strain and this is useful by the way, but something went wrong. This program was an extension for the browser, and in order to use it, I had to give a trade link and open my profile, which actually allowed somebody to do some manipulations on my account. By the way, after another half a day, all the Steam points were distributed from my account, when I checked who I gave them to, I saw only the hidden profile who had thousands of these medals and awards on his account.

So why did I even create this topic? After the whole situation, I removed the extension from the browser, limited the profile to everyone except friends and changed the trade link as well as passwords on the account, so I wanted to ask if I did everything correctly or if there is something else that can be done since now there is nothing with the account happens and there is a risk that after I deposit the money, it will be gone from my balance again. Therefore, I ask for opinions and advice that could secure the account, and share your situations if any.

What about the missing money? Everything that was sold on the steam is not returned, of course, and in the SIH reviews the developers write that they should be provided with proof that this is their work, otherwise it is slander, although what difference does it make if all these points and money in the account cannot be returned? Have a nice day everyone, be careful!

(sorry for my English grammar, hope you will understand the point)

[Callahan420]

Secure the account

Scan for malware https://www.malwarebytes.com/
Deauthorize all other devices https://store.steampowered.com/twofactor/manage
Change passwords from a clean computer
Generate new backup codes https://store.steampowered.com/twofactor/manage
Revoke the API key https://steamcommunity.com/dev/apikey

Stop using third party skin trading/gambling scam sites or clicking suspicious links.

[dieta-bozhenki]

Originally posted by Callahan420:

Secure the account

Scan for malware https://www.malwarebytes.com/
Deauthorize all other devices https://store.steampowered.com/twofactor/manage
Change passwords from a clean computer
Generate new backup codes https://store.steampowered.com/twofactor/manage
Revoke the API key https://steamcommunity.com/dev/apikey

Stop using third party skin trading/gambling scam sites or clicking suspicious links.

Thanks a lot, it was like a year ago, my friends recommended this and I just forgot to delete