Unknown activity on my account

[Purple_Infinity]

So apparently somebody gained access to my account, posted a bunch of listings on the community market, then bought a game with the money. I've disconnected all devices and changed passwords on Steam and the associated email. Is there more I need to do? Also, I'd like to report the actions but I cannot for the life of me figure out where to do it.

[Lilim]

Originally posted by Purple_Infinity:

So apparently somebody gained access to my account, posted a bunch of listings on the community market, then bought a game with the money. I've disconnected all devices and changed passwords on Steam and the associated email. Is there more I need to do? Also, I'd like to report the actions but I cannot for the life of me figure out where to do it.

Your account is compromised.

Do not trade until your account is secured.

Take the following steps to secure your account:

1. Scan for malware. https://www.malwarebytes.com/
2. Check that the email and phone number on the Steam account are still yours.
3. Deauthorize all other devices. https://store.steampowered.com/twofactor/manage
4. Change passwords from a clean computer.
5. Generate new backup codes for your Mobile App. https://store.steampowered.com/twofactor/manage
6. Revoke the API key (there should be no key). https://steamcommunity.com/dev/apikey


Can you refund the game?

[Purple_Infinity]

1. Done
2. Yes
3. Done
4. Done
5. I do everything via email, which is why I did step 2, 3 and 4 on it
6. No API key

The game has been redeemed and I can't seem to refund it. It's not that bad, because I have no money on my steam account and all they were able to get after selling my cards was just enough to buy fallout 3 GOTY. I know who has it though.

[Lilim]

Originally posted by Purple_Infinity:

I know who has it though.

Have you already reported that account?

Originally posted by Purple_Infinity:

So apparently somebody gained access to my account...

You have to find out how they gained access to your account.

• Have you been asked to vote for a team/tournament/pixel art?
  
• Have you been asked to register for a tournament?
  
• Have you used any third-party site for gambling or trading?
  
• Have you logged in on a public device?
  
• Have you entered any giveaways/giveaway groups?
  
• Have you tried to claim any "free 50$ gift cards"?
  
• Have you talked to an "admin" after being "accidentally reported"?
  
• Does someone else use your PC or your account?

[Purple_Infinity]

Originally posted by Lilim:

Have you already reported that account?

Yes I did.

Originally posted by Lilim:

You have to find out how they gained access to your account.

• Have you been asked to vote for a team/tournament/pixel art?
  
• Have you been asked to register for a tournament?
  
• Have you used any third-party site for gambling or trading?
  
• Have you logged in on a public device?
  
• Have you entered any giveaways/giveaway groups?
  
• Have you tried to claim any "free 50$ gift cards"?
  
• Have you talked to an "admin" after being "accidentally reported"?
  
• Does someone else use your PC or your account?

Malwarebytes found some stuff, no idea where it came from though, I usually am "good enough" not to fall into the obvious traps.