8000$ steam funds stolen on several accounts

[Nemer]

Im a trader so always carry some money on the steam funds, so yesterday all my accounts each of more than 1500$ were drained, the hacker bought worthless items of 0.03 cents with 1000$ from my account balance so he basically transferred all that money to his account, so no confirmation nothing just straight up buys, I changed all my password deauthorized all the sessions, I dont know what to do with my life honestly I worked and spent so much time to get that sum of money to see it disappear like that, I contacted the support 24 hours ago they still didnt respond to me, the more I wait the more Im stressing I didnt eat for 24 hours still, I live in a 3rd world country so that money is crazy amount for me.

[magicISO Sweden]

You must be logged out of all accounts to start the account recovery process.

You don't need access to the email, phone or password currently tied to the hijacked/hacked account for this to work. Just pick the "I do not have access..." or a similar option when asked.

And to help you sign-in: https://help.steampowered.com/en/wizard/HelpWithLogin

A step by step guide to the recovery process:
https://steamcommunity.com/sharedfiles/filedetails/?id=1126288560

[magicISO Sweden]

Accounts are phished not hacked.

You gave away all your account details.

The account name, the password and the KEY to the door, the Steam Guard Mobile code giving them access to the account.

How? by either logging into a known scam site or sites, tailored malware on your PC, the vote for my team scam, you have a pending ban scam on Discord, free knife click the link etc.

How does Steam (a program) know it is not you when all the account details are correct? It doesn't, therefore any action taken on your account is seen as you doing said actions.

The alternative is not plausible:

1) Someone would have to "GUESS" your account name from "millions of possible combinations".

2) Next they would have to "GUESS" your password from "millions of possible combinations" and then match it to your account name with "millions of possible combinations".

3) And finally they would have to "GUESS" the Steam Guard Mobile code "which changes every 30 seconds" to match both your account name and password to then have access your account.

[magicISO Sweden]

and you not gonna get anyting back.

[Nemer]

I didnt give anything, the got my web browsers cookies somehow and with these you can do purchases which dont need the steam guard

[Nemer]

If you make a security such as the steam guard to confirm for selling items and trading items, how is it not implemented for buying items

[ْSmoke™]

your money is gone for good man, not the support or anyone will able to get it back

[Crazy Tiger]

It's either phishing or malware. You aren't getting your money back.

Originally posted by Boberinho:

If you make a security such as the steam guard to confirm for selling items and trading items, how is it not implemented for buying items

Because that's a hoop to jump through that's annoying. Plus that ultimately, the real damage has already happened way before when you got your account compromised.

[Yujah]

The thing you said about "cookies" would be to say you fell victim to malware at some point and may still be infected. Pay therefore particular attention to step 1 in e.g. https://steamcommunity.com/discussions/forum/0/4423184908201391545/#c4423184908201398522 but do all of it again, since anything you already did can potentially have been useless as long as you were infected.

Also check that the ticket to Steam support is still open, because if you submitted it while your account was still compromised, the hijacker would generally have auto-closed it.

But, and I am very sorry to say this, Steam support will eventually tell you that items or funds will not be returned. You fell victim to a hack of your system or (more usual) an e.g. phishing scam and Steam can't help that.

Yes, the Steam authenticator isn't always useful. I've had it mentioned to me that it's not needed for all transactions due to people complaining about the frequency. I have argued that it should at least be an option to up the confirms -- but you'd in particular would admittedly probably not be helped by it since the amount of money probably implies you're a high-frequency trader and would have disabled it.

Be that as it may; I do in fact mean that I'm very sorry. These forums see tens of same/similar hacks/hijackings a day and sometimes it's actually heart-wrenching. But the money's gone and will not be returned. So sorry...

[Nemer]

Originally posted by Yujah:

The thing you said about "cookies" would be to say you fell victim to malware at some point and may still be infected. Pay therefore particular attention to step 1 in e.g. https://steamcommunity.com/discussions/forum/0/4423184908201391545/#c4423184908201398522 but do all of it again, since anything you already did can potentially have been useless as long as you were infected.

Also check that the ticket to Steam support is still open, because if you submitted it while your account was still compromised, the hijacker would generally have auto-closed it.

But, and I am very sorry to say this, Steam support will eventually tell you that items or funds will not be returned. You fell victim to a hack of your system or (more usual) an e.g. phishing scam and Steam can't help that.

Yes, the Steam authenticator isn't always useful. I've had it mentioned to me that it's not needed for all transactions due to people complaining about the frequency. I have argued that it should at least be an option to up the confirms -- but you'd in particular would admittedly probably not be helped by it since the amount of money probably implies you're a high-frequency trader and would have disabled it.

Be that as it may; I do in fact mean that I'm very sorry. These forums see tens of same/similar hacks/hijackings a day and sometimes it's actually heart-wrenching. But the money's gone and will not be returned. So sorry...

The thing is that malawarebytes didnt detect what I suspect to be the malaware, it was 4 days ago I made the scan it didnt detect anything

[Yujah]

OK. As said, phishing is the more usual attack vector, i.e., some third-party trading site having you "Login-with-Steam" -- but not really but actually on/through some private page that was only made to look legitimate and stealing your credentials, including a login 2FA code.

This seems to happen also from sites that you may have used for weeks or months. They just wait until they feel they likely have close to optimal profit, all the time sitting undetected on an account.

Once again; so sorry.

[Nemer]

Originally posted by Yujah:

OK. As said, phishing is the more usual attack vector, i.e., some third-party trading site having you "Login-with-Steam" -- but not really but actually on/through some private page that was only made to look legitimate and stealing your credentials, including a login 2FA code.

This seems to happen also from sites that you may have used for weeks or months. They just wait until they feel they likely have close to optimal profit, all the time sitting undetected on an account.

Once again; so sorry.

Thank you for the response, I dont really use other sites im normally very safe, just malawarebyte not detecting it as a malaware screwed me. But Im pretty sure it was a malaware.

[Yujah]

Have you checked if your message to support is in any case still open?

https://help.steampowered.com/en/wizard/HelpRequests

[Nemer]

Originally posted by Yujah:

Have you checked if your message to support is in any case still open?

https://help.steampowered.com/en/wizard/HelpRequests

Yes I sent a ticket as soon as I noticed the transactions and then I checked it was cancelled but then I proceeded to change everything and close the sessions for all devices and made another ticket but it seems like the steam support doesn't work on weekends

[Yujah]

OK, seems then that you will indeed now have cleansed your account. Not sure I should again be mentioning it -- but do still note that the reply is going to be that your money is gone.

Please go eat something...

[Nemer]

Originally posted by Yujah:

OK, seems then that you will indeed now have cleansed your account. Not sure I should again be mentioning it -- but do still note that the reply is going to be that your money is gone.

Please go eat something...

Alright thanks alot