My items were sold without my input or knowledge - RESOLVED (pretty much)

[็]

I found TONS of my items in my inventory being sold. I noticed it when I saw that a few of my TF2 cosmetics were missing, then when I saw that I had £1.91 pending in my wallet. All the listings were listed and purchased on the 12th of August, the day I found it. I cancelled the 2 active listings before they were sold to stop it early and then instantly changed my password. I have 2FA on Steam and had no notifications that anyone was trying to log in and the only 2 authorised devices are my PC and my Phone, meaning someone has remote access to my PC? I also found a forum post from 3 years ago with the same issue, and they suggested it was malware. I've done a malware scan and quarantined everything it told me was malicious.

If anyone knows what's happening please tell me because I'm kinda freaked out.

P.S luckily none of the items i genuinely care about were sold, only some cheap CS2 skins, trading cards, and cheap TF2 cosmetics.

[magicISO Sweden]

this what happens when you use steam login and steam 2fa on other things then steam

[magicISO Sweden]

and i see that you are in a scam group for CS skins ;) wonder where they got your login info hmmm

[็]

引用自 magicISO Sweden：

this what happens when you use steam login and steam 2fa on other things then steam

Do you mean using the same password for the steam login and 2FA? because yeah I stupidly did that but I would still get notifications when I get logins. All of my accounts have 2FA and I got zero notifications.

[็]

引用自 magicISO Sweden：

and i see that you are in a scam group for CS skins ;) wonder where they got your login info hmmm

Thats not a scam group and ive been in that group for ages and they havent done anything until today? it cant have been them seeing as i got stuff from them. the only reason i was in that group was because you had to be to get a free daily thing and i just forgot to leave it

[magicISO Sweden]

引用自 Jim：

引用自 magicISO Sweden：

and i see that you are in a scam group for CS skins ;) wonder where they got your login info hmmm

Thats not a scam group and ive been in that group for ages and they havent done anything until today? it cant have been them seeing as i got stuff from them. the only reason i was in that group was because you had to be to get a free daily thing and i just forgot to leave it

its a scam site that have that group and you use the logins there and they did take it and use it and sold your stuff

[็]

引用自 magicISO Sweden：

引用自 Jim：

Thats not a scam group and ive been in that group for ages and they havent done anything until today? it cant have been them seeing as i got stuff from them. the only reason i was in that group was because you had to be to get a free daily thing and i just forgot to leave it

its a scam site that have that group and you use the logins there and they did take it and use it and sold your stuff

can you provide a source that proves that either SkinsMonkey or WhiteMarket is a scam site? Theyre pretty legit since theyre sponsoring CS youtubers and doing partnerships with trusted people

[magicISO Sweden]

引用自 Jim：

引用自 magicISO Sweden：

its a scam site that have that group and you use the logins there and they did take it and use it and sold your stuff

can you provide a source that proves that either SkinsMonkey or WhiteMarket is a scam site? Theyre pretty legit since theyre sponsoring CS youtubers and doing partnerships with trusted people

steam them self says do not use steam login or steam API key on any third party site wonder why ? and why would and CS youtuber say no to money even its from a scam site that is rigged so those youtubers gonna win and make viewers go there to and you was one of them.

[magicISO Sweden]

https://www.reddit.com/r/ohnePixel/comments/10a40hb/csgo_scam_site_skins_monkey/ and here you go youtuber told ppl to go there and yes ppl got scammed they even told what video they got the info from

[็]

引用自 magicISO Sweden：

引用自 Jim：

can you provide a source that proves that either SkinsMonkey or WhiteMarket is a scam site? Theyre pretty legit since theyre sponsoring CS youtubers and doing partnerships with trusted people

steam them self says do not use steam login or steam API key on any third party site wonder why ? and why would and CS youtuber say no to money even its from a scam site that is rigged so those youtubers gonna win and make viewers go there to and you was one of them.

but i logged in through them so long ago dont you think they would have done it sooner? also the people who this has happened to havent been in groups like that or used sites like that. can you just be helpful rather than arguing about things that dont concern the issue at hand? all im asking here is that if checking my PC for viruses, deleting said viruses, and changing my password is enough to stop it from escalating?

[magicISO Sweden]

https://www.youtube.com/watch?v=6W46Xd8kbOI very good video why you should stay away

[Mr. Smiles]

引用自 Jim：

引用自 magicISO Sweden：

its a scam site that have that group and you use the logins there and they did take it and use it and sold your stuff

can you provide a source that proves that either SkinsMonkey or WhiteMarket is a scam site? Theyre pretty legit since theyre sponsoring CS youtubers and doing partnerships with trusted people

Always with the "trusted". Youtubers take money from anyone willing to sponsor them, there is no trust involved. Take money, talk up scam, reap benefits.

People need to stop putting their login info into 3rd party sites...

All third party sites are USE AT OWN RISK.

[magicISO Sweden]

引用自 Jim：

引用自 magicISO Sweden：

steam them self says do not use steam login or steam API key on any third party site wonder why ? and why would and CS youtuber say no to money even its from a scam site that is rigged so those youtubers gonna win and make viewers go there to and you was one of them.

but i logged in through them so long ago dont you think they would have done it sooner? also the people who this has happened to havent been in groups like that or used sites like that. can you just be helpful rather than arguing about things that dont concern the issue at hand? all im asking here is that if checking my PC for viruses, deleting said viruses, and changing my password is enough to stop it from escalating?

many scammer can wait years before using the info you gave away

[Mr. Smiles]

引用自 Cathulhu：

Hijacked, not hacked. You leaked your account credentials somehow.

Do not trade until your account is secured.

Take the following steps to secure your account:

1. Scan for malware. https://www.malwarebytes.com/
2. Check that the email and phone number on the Steam account are still yours.
3. Deauthorize all other devices. https://store.steampowered.com/twofactor/manage
4. Change passwords from a clean computer.
5. Generate new backup codes for your Mobile App. https://store.steampowered.com/twofactor/manage
6. Revoke the API key (there should be no key). https://steamcommunity.com/dev/apikey

Steam does not return inventory items or wallet funds: https://help.steampowered.com/faqs/view/3B6E-B322-2400-8D24

If you no longer have access to your account, read this:
https://steamcommunity.com/sharedfiles/filedetails/?id=1126288560

EDIT: sorry, was having issues with quote tags, doing it on mobile.

[็]

引用自 Mr. Smiles：

引用自 Jim：

can you provide a source that proves that either SkinsMonkey or WhiteMarket is a scam site? Theyre pretty legit since theyre sponsoring CS youtubers and doing partnerships with trusted people

Always with the "trusted". Youtubers take money from anyone willing to sponsor them, there is no trust involved. Take money, talk up scam, reap benefits.

People need to stop putting their login info into 3rd party sites...

All third party sites are USE AT OWN RISK.

yeah i get that but im not trying to figure out how it happened i just want to know if what i did to secure my account is enough. figuring out the cause is a waste of energy

[Mr. Smiles]

引用自 Jim：

引用自 Mr. Smiles：

Always with the "trusted". Youtubers take money from anyone willing to sponsor them, there is no trust involved. Take money, talk up scam, reap benefits.

People need to stop putting their login info into 3rd party sites...

All third party sites are USE AT OWN RISK.

yeah i get that but im not trying to figure out how it happened i just want to know if what i did to secure my account is enough. figuring out the cause is a waste of energy

Half of securing your account is figuring out how it happened and plugging the security hole. Because if you don't know HOW, you are likely to do it again.

Learn from your mistakes after securing your account as per my post above with Cathulu's helpful steps.