My Steam Account got hijacked and the hijacker sell most of my items to buy his Dota 2 items

[JasonM]

So I just woke up this morning to find unusual login alert from Reddit of all places. Then comes the Meta accounts (The hijacker posted some crypto promoting post on my account) so I have to change most of my password. I saw a login location from Russia. The hijacker also changed my EA account to a Russian Email (a .rus at the end)

Then I went to change Steam's password for safe measure and I saw my Steam Wallet suddenly has some funds in it. I got worried and checked my inventory. I was right, he sold almost everything that's sellable on the Market (save for some CS2 items) and then buy 2 Dota2 items.

I have never touched Dota2 in my life so this is definitely him

This is too much of a coincidence. I tried to contact Steam Support but there's no section for Hijacked accounts. I'm so pissed off

[BattleBeetle]

i have the same problem my microsoft account email change to .ru i'm still piss that microsoft and steam sent me email to tell me the did is already done so here a useless link.

[Lilim]

Originally posted by JasonM:

My Steam Account got hijacked and the hijacker sell most of my items to buy his Dota 2 items

Your account is compromised.

Do not trade until your account is secured.

Take the following steps to secure your account:

1. Scan for malware. https://www.malwarebytes.com/
2. Check that the email and phone number on the Steam account are still yours.
3. Deauthorize all other devices. https://store.steampowered.com/twofactor/manage
4. Change passwords from a clean computer.
5. Generate new backup codes for your Mobile App. https://store.steampowered.com/twofactor/manage
6. Revoke the API key (there should be no key). https://steamcommunity.com/dev/apikey

Not all items require confirmation to be sold: Click!

Steam does not return inventory items or wallet funds: https://support.steampowered.com/kb_article.php?ref=3415-WAFH-6433#noreturn

Originally posted by Community Market FAQ:

How can I reverse or cancel a completed Community Market transaction and/or get a refund?

All purchases are final – you will not have any right to a refund or a reversal of any Community Market transaction once it is completed.

Report the account that sold the overpriced item(s).

[JasonM]

Originally posted by The teammate U didn't ask for:

i have the same problem my microsoft account email change to .ru i'm still piss that microsoft and steam sent me email to tell me the did is already done so here a useless link.

Well at least you know there's something wrong. EA? No email whatsoever. I found out when I tried to login to the stupid desktop all to play Battlefront 2. Want to recover? Cool, we'll send and recovery email TO THE HIJACKER'S email. Thanks a lot!

[JasonM]

Originally posted by Lilim:

Originally posted by JasonM:

My Steam Account got hijacked and the hijacker sell most of my items to buy his Dota 2 items

Your account is compromised.

Do not trade until your account is secured.

Take the following steps to secure your account:

1. Scan for malware. https://www.malwarebytes.com/
2. Check that the email and phone number on the Steam account are still yours.
3. Deauthorize all other devices. https://store.steampowered.com/twofactor/manage
4. Change passwords from a clean computer.
5. Generate new backup codes for your Mobile App. https://store.steampowered.com/twofactor/manage
6. Revoke the API key (there should be no key). https://steamcommunity.com/dev/apikey

Not all items require confirmation to be sold: Click!

Steam does not return inventory items or wallet funds: https://support.steampowered.com/kb_article.php?ref=3415-WAFH-6433#noreturn

Originally posted by Community Market FAQ:

How can I reverse or cancel a completed Community Market transaction and/or get a refund?

All purchases are final – you will not have any right to a refund or a reversal of any Community Market transaction once it is completed.

Report the account that sold the overpriced item(s).

Yeah I've come to term with that. All I asked is for you guys to help reporting that sonava ♥♥♥♥♥♥

[BattleBeetle]

Originally posted by JasonM:

Originally posted by Lilim:

Your account is compromised.

Do not trade until your account is secured.

Take the following steps to secure your account:

1. Scan for malware. https://www.malwarebytes.com/
2. Check that the email and phone number on the Steam account are still yours.
3. Deauthorize all other devices. https://store.steampowered.com/twofactor/manage
4. Change passwords from a clean computer.
5. Generate new backup codes for your Mobile App. https://store.steampowered.com/twofactor/manage
6. Revoke the API key (there should be no key). https://steamcommunity.com/dev/apikey

Not all items require confirmation to be sold: Click!

Steam does not return inventory items or wallet funds: https://support.steampowered.com/kb_article.php?ref=3415-WAFH-6433#noreturn



Report the account that sold the overpriced item(s).

Yeah I've come to term with that. All I asked is for you guys to help reporting that sonava ♥♥♥♥♥♥

steam not gonna do anything when it happen to me the first time i know who did it report only
meet with silence ever since

[Aluvard]

Originally posted by JasonM:

Yeah I've come to term with that. All I asked is for you guys to help reporting that sonava ♥♥♥♥♥♥

Won't happen. Only you've interacted with him thus only you can report him as a scammer.
Also linking his profile counts as naming&shaming and you should delete it from your post before mods ban you for that.

[Supafly]

Originally posted by JasonM:

Originally posted by Lilim:

Your account is compromised.

Do not trade until your account is secured.

Take the following steps to secure your account:

1. Scan for malware. https://www.malwarebytes.com/
2. Check that the email and phone number on the Steam account are still yours.
3. Deauthorize all other devices. https://store.steampowered.com/twofactor/manage
4. Change passwords from a clean computer.
5. Generate new backup codes for your Mobile App. https://store.steampowered.com/twofactor/manage
6. Revoke the API key (there should be no key). https://steamcommunity.com/dev/apikey

Not all items require confirmation to be sold: Click!

Steam does not return inventory items or wallet funds: https://support.steampowered.com/kb_article.php?ref=3415-WAFH-6433#noreturn



Report the account that sold the overpriced item(s).

Yeah I've come to term with that. All I asked is for you guys to help reporting that *******♥♥♥♥♥♥

Steams system will see that all of us have had 0 interaction with that user. If we all mass reported for you then Steam sees all of our reports as fake what do you think is going to happen? Highly likely Steam just flags them all as FAKE and ignores the lot. So that would actually HELP the hijacker. Thus if you want Steam to investigate I suggest you remove the link as thats can potentially help the user. Not to mention naming and shaming is against the rules.

If it wasn't what would stop any of us creating a thread, making up a BS story and then linking you profile??

[JasonM]

Originally posted by Aluvard:

Originally posted by JasonM:

Yeah I've come to term with that. All I asked is for you guys to help reporting that sonava ♥♥♥♥♥♥

Won't happen. Only you've interacted with him thus only you can report him as a scammer.
Also linking his profile counts as naming&shaming and you should delete it from your post before mods ban you for that.

Oh alright. Thanks for the tip. I guess I'm just very angry

[DanteLGames]

Do you happen to have an iPhone and have the steam mobile app? On a not so updated iOS? I have almost exactly the same problem and I believe it was a backdoor on my device. I just changed all my passwords and updated and done reset to my device. I would like to know if it was the same for you.

[JasonM]

Originally posted by DanteLGames:

Do you happen to have an iPhone and have the steam mobile app? On a not so updated iOS? I have almost exactly the same problem and I believe it was a backdoor on my device. I just changed all my passwords and updated and done reset to my device. I would like to know if it was the same for you.

No I do not use iOS. I use the latest version of Android. Strange, however, the Steam app does not notice me about any unusual login

[Supafly]

Originally posted by JasonM:

Originally posted by DanteLGames:

Do you happen to have an iPhone and have the steam mobile app? On a not so updated iOS? I have almost exactly the same problem and I believe it was a backdoor on my device. I just changed all my passwords and updated and done reset to my device. I would like to know if it was the same for you.

No I do not use iOS. I use the latest version of Android. Strange, however, the Steam app does not notice me about any unusual login

Because when you gave away you login details Steam saw the hijacker as you so nothing was unusual. If you were using a phishing website and Steam notified you of a login you wouldn't think anything of it as you were the one logging in. A hijacker can sit inside your account for days, weeks and even months without ever having having to login again. Try it. Load Steam and be logged in and then leave your computer on and check back next week. You'd still be logged in.