Scammers from steam chat

[Little Songbird]

So days ago, I have a steam friend asking me to help him vote his CSGO team in a online website, when I went to the website, the server is down so I ignored it.

And today my irl friend called me saying he can’t access to a website and I found out that in steam chat, I sent something to him which is similar to that steam friend sent days ago telling others to vote their team

Do you know what causes people to impersonate others? They are not using same profile pic and name, they are even using our real account to message others

Edit: turns out I sent that kind of message to all my steam friends, I didn’t give them any information, I just click the website and when anti virus warn it is potentially a scam, I immediately left

[Yasahi]

Those links are used to hijack accounts. The hijacked account is then used to spread those links further. The friend who sent you a link was hijacked. You then went and fell for the same trap, gave your account details away and got your account hijacked.

After that, they've used your account to spam the same links to people on your friend list.

Remove the API key, deauthorize all other devices and secure your account.

[Der dicke Polizist]

lol they are pretty clever, faked an adress bar which looks like youre on steamcommunity.com

[Little Songbird]

Originally posted by Yasahi:

Those links are used to hijack accounts. The hijacked account is then used to spread those links further. The friend who sent you a link was hijacked. You then went and fell for the same trap, gave your account details away and got your account hijacked.

After that, they've used your account to spam the same links to people on your friend list.

Remove the API key, deauthorize all other devices and secure your account.

Idk what API key is, and deauthorize all other devices? You mean my phone which is linked with steam account?

[ReBoot]

They mean in your Steam guard settings.

[Little Songbird]

So I just remove Authenticator in my steam phone, I should be able to link with my phone again right? Do I have to do anything else?

[ReBoot]

Originally posted by Screw LOL:

So I just remove Authenticator in my steam phone, I should be able to link with my phone again right? Do I have to do anything else?

https://support.steampowered.com/kb_article.php?ref=8625-WRAH-9030#transfer

[Muppet among Puppets]

Scan for malware https://www.malwarebytes.com/
Deauthorize all other devices https://store.steampowered.com/twofactor/manage
Change passwords from a clean computer
Generate new backup codes https://store.steampowered.com/twofactor/manage
Revoke the API key https://steamcommunity.com/dev/apikey