Account hacked (new way of hacking, please read)

[76561198113758344]

Today I switched on my computer so that I could complete the last bit of Subnautica. To my surprise, I was logged out and my password did not work. I used the "Restore password" function, but to my surprise, I did not receive any steam emails to my inbox.

After a long period of trying everything, I noticed that *someone* had added Steam to "blocked senders" on my email account. That's right. I could no longer receive emails from Steam.

The hacker has of course changed the email address associated with my Steam account. When this happens, Steam sends an email to the original email address, informing you that the email is about to change. You are given an option to stop it. But in my case, *I did not receive any email from Steam because that sender was blocked*!

So now I have lost my account to a hacker and there does not seem to be a way to contact Steam's customer support.

Can anyone help me? Please?

[J4MESOX4D]

How exactly is this new? Your account and email is compromised probably because you have targeted malware on your device.

You can contact support here https://help.steampowered.com/en/ but do it in a browser when signed out but only after you've secured your device.

[Sgt. Bitch Tits]

tl:dr: secure computer, secure, email, contact steam support
links:
https://help.steampowered.com/en/faqs/view/0A94-F308-34A5-1988
here's a guide for a visual HowTo:
https://steamcommunity.com/sharedfiles/filedetails/?id=1126288560

this isn't new. do some virus scans, make sure your computer is not compromised. change your password and other security information for your email address and make sure to logout all other devices if your provider offers that. look for any old emails and look at the bottom for a self lock link, check trash too.

go to help.steampowered.com and when answering the questions, make sure you choose the option that indicates you do not have access to the current information. when you're at the form for contacting steam support make sure you explain the situation and work with them. also steam support does not talk to you outside of their ticket systems so people on discord are liars if they claim to be support.

[76561198113758344]

Thanks for your responses. I have secured the device now.

Am I supposed to reach a customer support form at the end of the "restore stolen account" process? I only get as far as submitting my credit card details (for matching with my latest purchase). But I get an error saying they cannot match my card details (I am 100% sure they are correct), so I am not allowed to progress to the next step.

How can I continue from here?

[76561198113758344]

Update: I found a way to reach the customer support form. I have now submitted it. Fingers crossed they will help me recover the account.

[CameL]

Originally posted by temporary*******:

Update: I found a way to reach the customer support form. I have now submitted it. Fingers crossed they will help me recover the account.

you can make a new account and contact Support from their as an option?

[Wolf Knight]

Originally posted by CameL 37:

Originally posted by temporary*******:

Update: I found a way to reach the customer support form. I have now submitted it. Fingers crossed they will help me recover the account.

you can make a new account and contact Support from their as an option?

you dont need to make a new account to contact support to recover an account. you have to be completely logged out of steam to make a recovery ticket for a stolen account.

[Sgt. Bitch Tits]

Originally posted by temporary*******:

Update: I found a way to reach the customer support form. I have now submitted it. Fingers crossed they will help me recover the account.

it will take a bit but they will get to it.

[Teksura]

Originally posted by CameL 37:

Originally posted by temporary*******:

Update: I found a way to reach the customer support form. I have now submitted it. Fingers crossed they will help me recover the account.

you can make a new account and contact Support from their as an option?

Creating a new account would be pointless. Account recovery assumes you don't have access to the account, you must not be logged in when initiating account recovery.

After all, if you are already logged in, why would you need to recover?

Account recovery is done in the usual way you find with any other website, where you click the obvious options at the login screen.

[Muppet among Puppets]

Secure your email account too.
If you did not make the mistake of having the same password for steam and email, two details leaked.
So secure your devices as well, and use for each account an own password.

Enable 2fa where you can. Especially email.

[Johnny Mnemonic]

Follow all the instructions above.

This also happened to me. I think we should start posting these scam sites and making more people aware of them. It's extremely easy to get items with the API key and these sites aren't getting shut down. The one I got scammed by has 13 hostnames that date back to 2023.

[Muppet among Puppets]

Originally posted by Johnny Mnemonic:

Follow all the instructions above.

This also happened to me. I think we should start posting these scam sites and making more people aware of them. It's extremely easy to get items with the API key and these sites aren't getting shut down. The one I got scammed by has 13 hostnames that date back to 2023.

Its better to only insert your login details in
ONE
page.
The original.

Easier to remember than all the other sites where you should NOT do it.

[Johnny Mnemonic]

That's super helpful, but I did not enter my login details. I used a QR Code specifically intended for linking to other apps. The API key involved in my case was created and used without my knowledge, and not authenticated in any way. If you're going to inform people, please don't act like we're all stupid. It's not as simple as you're trying to make it.

[no154370]

Originally posted by Johnny Mnemonic:

That's super helpful, but I did not enter my login details. I used a QR Code specifically intended for linking to other apps. The API key involved in my case was created and used without my knowledge, and not authenticated in any way. If you're going to inform people, please don't act like we're all stupid. It's not as simple as you're trying to make it.

Then don't log in to 3rd party malicious websites

And your steam account won't get COMPROMISED

[Johnny Mnemonic]

Originally posted by no154370:

Originally posted by Johnny Mnemonic:

That's super helpful, but I did not enter my login details. I used a QR Code specifically intended for linking to other apps. The API key involved in my case was created and used without my knowledge, and not authenticated in any way. If you're going to inform people, please don't act like we're all stupid. It's not as simple as you're trying to make it.

Then don't log in to 3rd party malicious websites

And your steam account won't get COMPROMISED

I see that you didn't read what I wrote. That's okay, I don't feel the need to convince you!

[Haruspex]

You've very likely managed to get yourself infected with malware. Maybe a RAT, or one that copies the browser session token. In your situation, you need to assume everything is compromised. Every login, every password, anything you've ever done online and your very OS installation cannot be trusted now.

You need to sanitize everything. From a clean device, recover every single login you've ever had that you actually care about, starting with your email. You need to deauthorize all devices on all accounts that keep track of that. Change all your passwords. Use unique and secure passwords and keep track of them with some kind of password manager like Keepass. Enable 2FA where you can. Backup what's important and do a full format/reinstall of your operating system on the infected computer before you try and use your new login information on it.